Original:
Each architectural layer of ONAP (eg. operating system, network, application) MUST support access restriction independently of all other layers so that Segregation of Duties can be implemented.

Modified:
Each ONAP component MUST support access restriction independently of other components.