Which cоmpоnent оf аn Identity аnd Access Mаnagement (IAM) system is responsible for defining the correct granularity for access controls and overseeing the relationships between identities, access control rights, and IT resource availability?