MediationZone 
Image Added applications are managed on group level through the Access Controller application. Every application contains a set of base permissions, but can also define own permissions based on how they interoperate with the user. Every user is a member of one or several user groups. There are two standard groups available:
All – All users are members of this group
Administrator – Users of this group will have full authority, no matter the configuration
For every MediationZone Image Added application, one or several groups can be granted various types of access. The following figure shows an example of users and permissions management in Access Controller. All actions performed by users are logged to the System Log.
...