The problem I find with option a) on top of what has been said is that the table doesn't update as new items appear. this means that analysts need to go back to the workspace and manually update the tables; in a large organization this is not a sustainable workflow.
Currently, the admin console gives the ability to copy permissions from a product profile. It would be great to extend this functionality for the permissions of useres as well.