Is there layering and/or compartmentalization of management accounts? How is this regulated?

There is a superuser account and an DataverseAdmin account. The DataverseAdmin account is used only by the application administrator, for system configuration. The superuser account is only used by the DANS Information Systems Officers.

At DataverseNL, the local administrators of the institutes are given the (local) admin role. They can further assign rights to the users of their institute themselves.

At the DANS Data Stations, all end users automatically receive a DANS contributor role after registration. For data curation, the data archivists within DANS have the data manager role.