How to determine who has access to download, share, and create information on the system?