Mechanisms exist to restrict the assignment of privileged accounts to organization-defined personnel or roles without management approval.