A member of the Sage Bionetworks Access and Compliance Team (working with the data contributor to figure out what conditions are required) can toggle a number of options for this type of Access Requirement. Let's assume they decide to flip on all options. That would look like this:
On the other side, when someone requests access to these data, they always need to tell us about their Research Project:
And for this access requirement configuration, they need to provide a number of other files ("other required documents" would be described in the Access Requirement instructions).
On update (to renew or revoke), there's some additional information that the governance team would like to know: