The exact setup should reflect who provides access, who administers the account and what happens when the assignment ends. Confirm the intended arrangement before rollout.