Access rights/permissions in the IMAS portal are personal and granular, meaning that access rights are specified for each person. Permissions are defined for each type of procedure (currently only fit and proper) and for each legal entity. Thus, a user’s access rights can be restricted to a single entity, to several entities or to all entities within the group. The only people who have access to everything are the DAAs, who set up the access rights for all users within the group, including, potentially, themselves.