what attribute other than individual identity and group membership can be used to restrict unauthori

In the context of information security, what attribute other than individual identity and group membership can be
used to restrict unauthorized access?

A.
Role

B.
Shared passwords

C.
HBA World Wide Name

D.
Host network address