In BAS, who is typically authorized to assign access levels and codes to other individuals?

• A. Supervisor
• B. Operator
• C. Technician
• D. Guest

Answer: (A)

Access control management in a BAS is about who has the authority to grant or change users’ permissions. Typically, the supervisor holds this responsibility because it requires oversight, policy enforcement, and an audit trail. The supervisor can define what each user is allowed to do, assign the appropriate access level or codes for their role, and revoke or adjust access as needed. This centralized control helps enforce security, maintain accountability, and apply the principle of least privilege, ensuring people only have the access they need.

Other roles usually don’t have the authority to assign access levels or codes. Operators and technicians generally operate within the permissions they've been given, but they don’t grant access to others. Guests have the most limited access and no rights to modify access controls.