What rough outline of a policy would you establish to determine who should be allowed to have administrative rights on a computer system with role-based access control? Remember, policies can refer to specific workstations, employee types, customer types, etc. Defend the major tenets of your policy.