Every user you create in the IAM system starts with _________.

C
Permissions let you specify who has access to AWS resources, and what actions they can perform on those resources. Every IAM user starts with no permissions. In other words, by default, users can do nothing, not even view their own access keys. To give a user permission to do something, you can add the permission to the user (that is, attach a policy to the user) or add the user to a group that has the desired permission.
http://docs.aws.amazon.com/IAM/latest/UserGuide/access_permissions.html