diff --git a/src/index.js b/src/index.js
index fcbfecd..b7d5416 100644
--- a/src/index.js
+++ b/src/index.js
@@ -62,10 +62,15 @@ app.get('/organisation-data', (_req, res) => res.send(data))
 app.get('/all-access', async (_req, res) => {
   const users = await User.findAll()
 
-  const usersWithAccess = users.map(({ dataValues: user }) => ({
-    ...user,
-    ...getIAMRights(user.iamGroups),
-  }))
+  const usersWithAccess = users.map(({ dataValues: user }) => {
+    const iamGroups = user.iamGroups.filter((iam) => relevantIAMs.includes(iam))
+
+    return {
+      ...user,
+      iamGroups,
+      ...getIAMRights(iamGroups),
+    }
+  })
 
   return res.send(usersWithAccess)
 })