Access is granted based on:
Individual access rights
Group membership
Active Directory
LDAP