Mechanisms exist to ensure management approvals are required for new accounts or changes in permissions to existing accounts.