How should headquarters, regional teams, and agencies divide access?

Headquarters should own policy and global review, regional or brand teams should operate defined markets and accounts, and agencies should access only contracted accounts and assets under least privilege across role, function, account, and asset data.