Configuring Identity Based Access Control and Threat Prevention

For design guidelines, see sk175587.