Access is restricted to authorized users; sessions are logged by identity, time and action.