What section of the NIST SP 800-171 2nd revision has the requirement: Limit system access to the types of transactions and functions that authorized users are
permitted to execute?
This requirement is found in the Access Control section of the SP 800-171 document.
That requirement is found in the Access Control section.