User Rights and Permissions.
Privilege management is a major PCI DSS concern. An introdution.
Access Control of credit card data is a mandatory requirement under PCI DSS, and covered in Control 7. An overview to access control.