My Sage does not prevent a general user, who is an authorised person to communicate with Sage for general assistance, from contacting Sage and requesting their permissions be upgraded to admin level, thus granting them complete control. Consequently, should they leave the company, they could download any of the packages the company subscribes to and use them for their own benefit free of charge.
This poses a significant risk to a company, as there are no notifications sent to the primary account holder regarding:
Modifications to an individual's administrative rights.
Someone having downloaded/installed software.
The general user (authorised to speak to Sage for help) having the ability to change the primary account holder to themselves without any form of communication with the primary account holder.
Security risk.