access rights in the cloud service