https://ones.com/blog/knowledge/best-practices-managing-user-permissions-it-projects/