Generic operating system accounts, if used, either take the user straight to the application logon and log off the operating system when the application exits, or limit the user to assigned applications with no ability to run other functions or reach the operating system interactively; the method is described in the written system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.