A company's new systems administrator has been asked to create a new user for the human resources department. Which of the following will help the systems administrator understand the user privileges for each role in the company?

A. Identity and access control management policy
B. Classification and management policy
C. Change management policy
D. Standard operating procedures