A system comprising: a plurality of object storage devices (1030, 1510) each including a plurality of drawers and/or shelves for storing objects and each having an access control device operative to limit access to the object storage device; and characterized in that the access control device is configured to: establish a first group including a first subset of the plurality of object storage devices, a first subset of all users of the plurality of object storage devices, and a first subset of all work locations associated with the plurality of object storage devices; establish a second group including a second subset of the plurality of object storage devices, a second subset of all users of the plurality of object storage devices, and a second subset of all work locations associated with the plurality of object storage devices; receive from a user a request to access at least one object storage device of the system; determine whether the user is associated with the first group or the second group; and based on a result of the determination, when the user is associated with the first group, the access control device of at least one object storage device of the plurality of object storage devices is configured to grant the user access to the first subset of the plurality of object storage devices in the first group and at the first subset of all the work locations; and when the user is associated with the second group, the access control device of at least one object storage device of the plurality of object storage devices is configured to grant the user access to the second subset of the plurality of object storage devices in the second group and at the second subset of all work locations; and assign the user to a system user subset of the determined group. a plurality of object storage devices (1030, 1510) each including a plurality of drawers and/or shelves for storing objects and each having an access control device operative to limit access to the object storage device; and characterized in that the access control device is configured to: establish a first group including a first subset of the plurality of object storage devices, a first subset of all users of the plurality of object storage devices, and a first subset of all work locations associated with the plurality of object storage devices; establish a second group including a second subset of the plurality of object storage devices, a second subset of all users of the plurality of object storage devices, and a second subset of all work locations associated with the plurality of object storage devices; receive from a user a request to access at least one object storage device of the system; determine whether the user is associated with the first group or the second group; and based on a result of the determination, when the user is associated with the first group, the access control device of at least one object storage device of the plurality of object storage devices is configured to grant the user access to the first subset of the plurality of object storage devices in the first group and at the first subset of all the work locations; and when the user is associated with the second group, the access control device of at least one object storage device of the plurality of object storage devices is configured to grant the user access to the second subset of the plurality of object storage devices in the second group and at the second subset of all work locations; and when the user is associated with the first group, the access control device of at least one object storage device of the plurality of object storage devices is configured to grant the user access to the first subset of the plurality of object storage devices in the first group and at the first subset of all the work locations; and when the user is associated with the second group, the access control device of at least one object storage device of the plurality of object storage devices is configured to grant the user access to the second subset of the plurality of object storage devices in the second group and at the second subset of all work locations; and assign the user to a system user subset of the determined group.