We are doing a review of roles and permissions in our instance of Canvas. Right now, we have a list of all permissions and are hoping to apply a risk level or rating to each permission. Has anyone done this kind of thing before, and do you have a risk matrix that you are happy to share with us?
