Watch this video on YouTube
Which form of access control is BEST suited to implementing least privilege and separation of duties?