When it comes to data access, there’s no good reason for everyone in your business to have access to all the files. There’s just too many risks involved, and you’re not about to make risk management the central part of your job duties. Therefore, it makes sense to limit who has access to what data based on their user role.