# II. Access
# II.1 External Persons with a User Account
Attention
A user account is mandatory for data exchange on OEM shares!
The use of two-factor authentication required for OEM customers can only be technically implemented if the external person also has their own user account on the respective share.
This requires the prior registration of the external person as a B2B user in IAV’s Identity & Access Management and, ultimately, the request for the resource (share) to which this person needs access.
# II.1 External Persons without a User Account
Attention
This option is only available with IAV Share!
For projects with non-OEM data, the use of two-factor authentication is not mandatory, which means a separate access for the external person is not required.
For the exchange, a combination of “link + password” generated automatically by IAV Share is sufficient. (See: "Sharing a file" / "Sharing a folder")
A separate area of the sharing platform is used here, where the data is made available and, depending on permissions, can also be uploaded.
Reminder
Confidential or strictly confidential information must always be additionally encrypted in IAV Share beforehand.
Attention
In case of doubt, it must be clarified in advance between IAV and the external party whether data exchange via this method is permitted. If two-factor authentication is required, the recipients must be set up internally at IAV and the data exchanged on a suitable share.