access rights in the cloud service 2