Control access based upon organization-defined roles and users authorized to assume such roles.
No STIG checks reference this CCI.