It would seem to me that with laws like Sarbanes-Oxley, that a lot of DBAs would be faced with providing information/reviews of who has access to the databases they administer in order to prove/satisfy requirements that they are properly managing server and database access. Are there some standard reports or scripts that are accepted by the SQL Server community for these situations? Are there some 3rd party tools available for these situations?