An MDM system's rights management component decides which users can configure which settings on mobile devices and who can access which data. If an employee is assigned the wrong role, there is the risk that they will be granted higher-level rights than they should have. For example, they could view data without authorisation or change settings on their device. It would also be possible for them to install and use apps (or cloud storage services, for example) which are not authorised in their organisation. This may result in leaks of the organisation's sensitive data or the violation of statutory data protection regulations.