Unimus v2.5 and newer

Account with restricted access can reach one of the following outcome based on Access Policy which is set to it.

...

Each existing account must contain an access policy that is assigned by the administrator during account creation and that can be changed by that role at any time.

Unimus provide 2  general provides two general object-based policies and 2 and two additional policies that handle access to objects based on tag restrictions:

...