With regard to traditional people resource permissions, what are the layers of access permissions that need to be set?

Internal, external, and read access.

Testing, validating, and reporting access.

Viewing, programming, and integration access.

Physical, network, and application access.