Instead of giving a security administrator full administrative rights on the network, the administrator is given rights only to review logs and update security related network devices. Additional rights are handed out to network administrators for the areas that fall within their job description. Which of the following describes this form of access control?
A.
Mandatory vacation
B.
Least privilege
C.
Discretionary
D.
Job rotation