Tommy handles access control request for his organization. a USer approaches him and explains that he needs access to the human resources database to complete a headcounttannalysis report requested by the chief financial officer according to which rule has a USer Demonstrated successfully to Tommy regarding access for the database? privilege creep, need to isolate, need to know, separation of dutie