6.1.4 Least Privilege

The application by default assigns no groups to a user. This is zero privilege from a functional perspective. With no groups assigned, a user cannot view the menu list as everything will appear to be blank. The system administrator has to explicitly map the groups to a user he creates. If a user is created by copying an existing user, then the new user will have the groups assigned to it from the user it has been copied. Nevertheless, it's recommended to map users to specific groups as per his job grade, designation etc.