identification
authorization
access
object
subject
operation
owner
labels
MAC
DAC
job rotation
Least privilege
Kerberos
Security Assertion Markup Language (SAML)