SAP

Do the products process integration/process orchestration or SAP NetWeaver users cover the risk of Indirect or Digital access?
If an Employee has access to 2 or more SAP production instances and systems, is there a need to buy an additional license for each instance?