Fine Grain Access

Database object level access controls are possible, right? So why are the identity management vendors saying they can't do it with their connectors?

User identities and their access to applications and databases that run on a mainframe can be managed down to the most granular detail, right? So why are the identity management vendors saying they can't do it?