Effective access is the total access an identity can actually exercise after resolving direct assignments, groups, nested groups, roles, policies, inheritance, resource permissions and exceptions. It may differ significantly from the access shown on the identity's account record.
IGA reviews should expose effective access where possible, because reviewing only direct assignments can miss inherited or indirect privilege.