Is an approach to restricting system access to authorized users.

Controlling access to resources isn't all you can do. You can also centralize configuration management.

You wouldn't want to setup printers or software for each and every user.