Access controls can be specific to individual users or to a group of users.
Users should only be given access to those files and system resources they need to perform their job. Account Restrictions Time Restrictions Other Privileges Users should only be given rights to directories they need to do their job. If a user needs temporary access to a directory, the access rights should be removed when they are no longer needed. Users should only be given the Trustee rights they need to do their job. Once a right is no longer required, remove it right away.