Tag: flexibility in access privileges based on roles or responsibilities