When it comes to granting rights, managers responsible for enterprise IT would always like to define access to important systems as precisely as possible. It is only in the rarest cases that one uniform administrator profile is sufficient for the entire IT support: Especially with regard to email security, it often occurs in practice that support employees are only supposed to monitor the flow of messages for one specific department or site.