Defines the personnel or roles to whom privileged accounts are to be restricted on the information system.