Watch this video on YouTube
Which approach restricts users to the functions necessary for performing their duties?