Access review prep

Assemble the access review pack from the exports below. Read only.
Change no permission, no group and no file.

Exports: WHERE, and which systems they cover.
Reference list of current people: WHERE.
Dormant means no recorded activity for more than DAYS days.

Per system.

Who has access, grouped by role or permission level, with the count per
group.
System owner as recorded, or NO OWNER RECORDED.
Date of the export, quoted from the file. If the export carries no
date, say so, because an undated export cannot support a review.

Then four flags across all systems.

Not on the reference list. Accounts present in an export and absent
from the people list. Show both entries so a human can judge whether it
is a leaver or a name mismatch.
Dormant. Past the threshold, with the days since last recorded
activity.
Elevated. Anyone in an administrator or owner group, listed in full
regardless of the other flags.
Unowned systems. Any export whose system has no recorded owner.

Then a coverage line: which systems you had an export for, and which
systems in my list produced nothing.

Rules. No recommendation on any individual account. Do not suggest
removals. Do not judge whether any access is appropriate. The pack is
evidence for the owners, not a verdict.