The ability to change access permissions is another type of access that can be granted or denied.Access control should be considered in a system approach in which a strong user (entity or member) identification and authorization (I&A) process plays a role.Thus, the goal is to provide access control to objects such as data and applications.