roles, history of access/usage, etc.
u Authentication—Each user’s identity must be authenticated before the
user is allowed to access a system or resource. This authentication is
based on the presentation by the user of a unique identifier plus one or