Is anyone using HCM positions to aid or inform access control for other business systems?

Oracle version 12.2 RUP 17

We've been having discussions for a while now about IT system access control and it's been suggested that the HR module, in particular positions, could be used to hold the access requirements for each position. There's a possibility we may be asked to store hardware requirements too.

Has anyone used positions in this way?

Has it ever been a consideration that was rejected for another solution? What solution did you go for?

Access and hardware requirements are not typically included in our job descriptions.

Any thoughts or advice about this idea would be much appreciated.