Which is a BEST practice method to assign rights and privileges?

Which is a BEST practice method to assign rights and privileges?

A.
By network

B.
By individual

C.
By group

D.
By location