Management personnel, the IT service provider or persons independent of the department being controlled establish, or review and approve, user accounts for new employees, provisioning functions that match the employee's current job responsibilities to keep segregation of duties unless management authorizes otherwise.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.