Analyze RBAC configurations — wildcard permissions, role explosion, duplicate perms, and permission checks.