Requiring approval before granting system access would be:

Administrative controls consist of management activities such as organizational policies and procedures.