They need this access to be able to use their computer, but even if they don't manage their own computer... maybe read the above comment and then let me know what I've overlooked rather than me repeating the whole thing