Granular access rights to compliance and protection