Privileged Identity Manager's resource- or host-based access control approach, which focuses on controlling access to the server operating system and limits the scope for administrators to modify processes, configuration files or registries.