Implementing user accounts and access rights is the recommended mechanism to enforce the principle of least privilege on the user level. Defining user access rights and user policies, are all important measures.
Typical user definitions are accounts of the process control system, demilitarized zone and for remote work. This service shall give the customer peace of mind that users of the system always have the approved and relevant access rights.