How can access be restricted in the context of information security, without using group membership

How can access be restricted in the context of information security, without using group membership orrole
attributes?

A.
Individual identity

B.
Host network address

C.
HBA World Wide Name

D.
Shared Testwords