[ishitatsuyuki]

I think the point is that the permission management is manual, not systematical.

[guims767]

At least it'd be good to have an automated email when someone from support access your data with what data was accessed, when and by whom and for what purpose (i.e. related to your support request).