What requirement in the Access Control section of the NIST SP 800-171 revision 2 document tells a user to limit system access to authorized users?
This requirement is in section 3.1.1
That requirement is 3.1.1.