A system is developed so that its business users can perform business functions but not user
administration functions. Application administrators can perform administration functions but not
user business functions. These capabilities are BEST described as

A.
least privilege.

B.
rule based access controls.

C.
Mandatory Access Control (MAC).

D.
separation of duties.