Which of the following additional countermeasure could Roger take to help protect privilege in the case that Roger, a security analyst, wants to tighten up privileges to make sure each user has only the privileges they need to do their work?

A Instigate multi-factor authentication and authorization.

explanation