CompTIA Security+™: Review Guide

3.3. Organize users and computers into appropriate security groups and roles while distinguishing between appropriate rights and privileges.

Being able to organize users and computers into appropriate security groups and roles is an important part of establishing and maintaining the security of an organization. Often, this sorting process is dependent upon the mission and goals of the organization, the collection of job tasks, and the classification of both subjects (users) and objects (resources). Once this organizational scheme is defined and applied, distinguishing and determining appropriate rights and permissions is often a function of the application of the principle of least privilege and separation of duties.

There are two overarching ...