The correct answer is access control. It is because this has the function of providing a user an access when the individual is considered or belong to the authorized users and if not, they are likely to be denied to the access that they requested if they belong to the unauthorized users.