"In traditional approaches, a user who is granted elevated rights typically is granted the elevated rights based on the group or team that the user is a part of, regardless of whether the user actually needs elevated rights to perform his/her day-to-day job." . . . .