An employee in a new department receives an access denied error when attempting to access the first system on a list. What is the most likely reason?

• A. The system is under maintenance
• B. The password has expired
• C. The resource requires higher privileges
• D. The company uses role-based access control and her user account hasn't been migrated into the correct group(s) yet.

Answer: (D)

Access is controlled by roles, with permissions tied to those roles rather than to individual users. When someone moves to a new department, they must be provisioned into the appropriate role or group that grants access to each system. If this employee’s account hasn’t been migrated into the correct group(s) yet, the authorization checks will show that they don’t have the necessary permissions for the first system on the list, resulting in an access denied message even though the login itself works. This scenario highlights why onboarding and proper provisioning of role-based access is essential. If the issue were password-related, the user wouldn’t reach the system at all; if maintenance were the cause, you’d expect an availability message rather than a denial tied to permissions; and while needing higher privileges could cause denial, the most likely reason in a new department is missing group membership due to incomplete provisioning.