How can a small business implement AC.L1-b.1.ii (Transaction & Function Control)?

Small businesses can assign user roles or permissions within their software applications and operating systems. For example, some users might only view FCI, while others can edit it, based on defined job responsibilities. Deny access by default.