A company has 5 users. Users 1, 2 and 3 need access to payroll and users 3, 4 and 5 need
access to sales. Which of the following should be implemented to give the appropriate access
while enforcing least privilege?

A.
Assign individual permissions to users 1 and 2 for payroll. Assign individual permissions to
users 4 and 5 for sales. Make user 3 an administrator.

B.
Make all users administrators and then restrict users 1 and 2 from sales. Then restrict users 4
and 5 from payroll.

C.
Create two additional generic accounts, one for payroll and one for sales that users utilize.

D.
Create a sales group with users 3, 4 and 5. Create a payroll group with users 1, 2 and 3.

Explanation:
Assigning permissions to a group requires less effort than assigning permissions to individual
users. When you have groups configured with the appropriate permissions, you can grant the
permissions to individual users by adding the users to the groups. Users can be members of
multiple groups and therefore have multiple sets of permissions assigned to them. In this answer,
user 3 is a member of both groups which grants the user permission to both Sales and Payroll.