Access/authorisation schemes of all central services should be clearly documented

Access/authorisation schemes of all central services should be clearly documented, currently we mainly rely on people's memory or service admins and while for some services this information may be buried in various places it's hard to find it so it's costly in time and error prone.
Example: secmon.egi.eu is only accessible by users having the NGI Security officer role.