Which Security Procedure item assigns user privileges as authorized or unauthorized?

Which Security Procedure item assigns user privileges as authorized or unauthorized?

• A. End-to-End Access Control
• B. Privileges Assignment
• C. Think like an adversary
• D. Traffic Analysis

Answer: (B)

Assigning what a user is allowed to do is privileges assignment. This is the process of granting or denying permissions to perform specific actions or access resources based on roles or policies, turning policy decisions into actual rights. When privileges are assigned, a user becomes authorized for certain actions and unauthorized for others, which is the core of controlling access. Authentication confirms who the user is, while authorization checks rely on these assigned privileges to allow or block actions at each access attempt. The idea here is that privileges assignment directly establishes who can do what, rather than how decisions are enforced across the system (end-to-end access control), how attackers think to probe systems, or how network traffic is analyzed.

Assigning what a user is allowed to do is privileges assignment. This is the process of granting or denying permissions to perform specific actions or access resources based on roles or policies, turning policy decisions into actual rights. When privileges are assigned, a user becomes authorized for certain actions and unauthorized for others, which is the core of controlling access. Authentication confirms who the user is, while authorization checks rely on these assigned privileges to allow or block actions at each access attempt. The idea here is that privileges assignment directly establishes who can do what, rather than how decisions are enforced across the system (end-to-end access control), how attackers think to probe systems, or how network traffic is analyzed.