If we have different repositories, one for each of our environments: development, test, production,
Can we copy permissions and permissions sets between environments/repositories?
If so, when I'm working in a certain environment, could I know which new elements (roles, permissions, …) have I added to this environment so I can copy them to the other environments?

VG provides a deployment tool to deploy security rules from one repository to another.

You can read more at:
http://www.visual-guard.com/EN/net-powerbuilder-application-security-authentication-permission-access-control-rbac/vg-winconsole-deploy-permissions-in-production.html

Deployment Wizard
Each new version of an application may come with new permissions.
You need to deploy this repository, without loosing the data already entered by administrators in the previous repository.

Visual Guard provides a Wizard to deploy new permissions in a production repository.
Visual Guard Deployment Wizard will merge new and previous permission automatically, without losing existing user accounts and roles.



Visual Guard