Identity management
Access control is granted on the principle of least privilege. Users and services are only provided access to the information they require to perform their tasks and role. Access to systems is based on role, and access to data is based on roles and attributes.