The product does not sufficiently compartmentalize functionality or processes that require different privilege levels, rights, or permissions.