Hi Hussein
in my opinion , if you are in situation that each segment is paying and incurring expense on behalf of each other .. you need to grant access to like one user in each segment to be authorized to carry cross segment posting to low the risk that you may see if you open the authorization to all the user in different locations.
Regards
Mahmoud EL Nady