We have a fairly sophisticated ACL system in place that allows users to provide various levels of access to remote sites. For example, OEM’s can setup sub-organizations so their agents/customers can ONLY access their devices. However, because the OEM is at a higher level, they STILL have access to those devices.