Authorised users control how TSF functions behave: determining behaviour, disabling, enabling or modifying a function is restricted to identified roles. One component: FMT_MOF.1 Management of security functions behaviour.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.