User Accreditation Range Examples

The user accreditation range of a system is the set of sensitivity labels at which normal users are intended to be able to operate. The user accreditation range is conceptually specified as a list (or set) of sensitivity labels. In this manner, certain sensitivity labels can be left out of the list, as will be the case for many systems.

Note that the restriction the user accreditation range places on sensitivity labels does not apply to either clearances or information labels.

For example, consider a system that processes TS along with compartments A, B, and C. The complete list of possible sensitivity labels (and hence the largest possible user accreditation range) for such a system is:

TS   TS A   TS B   TS C    TS A B  TS A C   TS B C   TS A B C

However, a more realistic user accreditation range for such a system might be:

TS A B   TS A C   TS A B C

In this example, compartments B and C can be processed only in combination with A, and A cannot be processed alone.