"Use it or lose it" is a good policy guide for assigning and removing access to EBS Responsibilities. But how do you judge whether a User is making effective use of their Responsibility assignments? When and how often have they used it?
See an aged User Responsibility Logins report you can use to help with periodic access rights and responsibility assignment audits.