Access levels are typically determined by the project manager or lead researcher. In some cases, a dedicated IT department may also be involved, especially in large-scale industrial settings. The determination is based on the roles and expertise of the team members.