What section of the NIST SP 800-171 2nd revision has the requirement: Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems).
Found in the Access Control section of the SP 800-171 document.
The section that requirement is located in is the Access Control section.