1. A system for streamlined analysis of access sub-networks in a cloud environment, comprising: memory storing access sub-networks in a cloud environment between a plurality of resources and a plurality of users, wherein a subject access sub-network makes a subject resource accessible to one or more users; memory storing user-to-role mappings for roles assigned to the plurality of users, wherein the roles are defined at a resolution of the cloud environment; and accumulation logic, having access to the access sub-networks and to the user-to-role mappings, and configured to traverse the access sub-networks to build a number U user-to-resource mappings between the plurality of users and the plurality of resources, and to evaluate the number U user-to-resource mappings against the user-to-role mappings to accumulate a number R role-to-resource mappings between the roles and the plurality of resources, wherein R<<U.
