Access control is focussed on controlling who has access. This is typically achieved by restricting access by certain types of groups or
access levels.