An organization wants to provide its employees with a limited set of self-services via an online portal. A requirement is that when employees log into the portal, they see only those services that are applicable to their status in the organization and that they have the authority to access. The organization also wants to provide employees with the ability to adjust the layout of the portal. Which service provisioning approach should this organization use?