General Access Control Guidance for cloud systems-1.pdf