Users should not be granted access to a system unless they're going to use its primary function.