The aim is to improve debugging of access issues. A tree of the roles assigning (and direct) UACs would be amazing!