Nesting depth is the number of levels in a chain of nested groups: a group whose member group contains another group sits at depth three. Depth measures how far access and licenses travel from where they are granted to the people who receive them.
Why depth matters#
Every level of depth adds one hop between a grant and its effect, and human reasoning degrades fast across hops. At depth two, an administrator can usually predict a change's effect. At depth five, nobody can, and changes start producing surprise access gains and losses.
Depth also compounds other structural problems: deep chains are where circular references hide, where effective access is hardest to reason about, and where membership sprawl multiplies fastest.
Setting a maximum#
Organizations that govern depth pick an explicit maximum, commonly between three and five levels, write it into policy, and check it continuously. The number matters less than its enforcement: an unenforced maximum is a wish, and depth grows back after every one-off cleanup.
VisualizerEngine
Depth in VisualizerEngine
Depth analysis compares every chain against the maximum your organization tolerates and ranks every violation. The policy engine turns the threshold into a governance rule with a live compliance percentage and drift over time, so depth stays visible between audits.