Who Is Responsible For User Access Rights