Users and groups must request access from the administrator for each resource.

Users and groups are granted access based on their roles without the need for policies.

Users and groups are automatically granted access to all resources.

Access to resources is explicitly granted in policies; otherwise, it is denied by default.