Why is it not a good idea for Stan, the new HR manager, to give everyone in his department access to create and delete accounts?
1) HR employees are not usually on the Access Control List (ACL)
2) This could allow HR employees to bypass privacy filters, though it isn't that big of a threat since they are HR
3) This could enable tailgating
4) This does not align with the principle of least privilege