Tag: which authorization model grants privileges based on the group membership of network users?