All of the following are valid best practices for information systems access controls, except:

A$.$ tie access controls to the environment.

B$.$ create a baseline for access.

C$.$ automate user creation.

D$.$ segregate users' rights by their preferred groups.