When implementing a new system, a systems administrator works with the information system owner to identify and document the responsibilities of various
positions within teh organization. Once responsibilities are identified, groups are created within the system to accommodate the various responsibilities of each
position type, with users being placed in these groups. Which of the following principles of authorization is being developed?

A.
Rule-based access control

B.
Least privilege

C.
Separation of duties

D.
Access control lists

E.
Role-based access control