Who can reach what — and who cannot — decides whether an operation is secure or exposed, and the answer is rarely a single setting. This module builds practical, cross-platform skills in file permissions, access control, and least privilege on both Linux and Windows. Learners set file and directory permissions and ownership on Linux. They configure NTFS and share permissions on Windows. They apply least privilege so that each account holds exactly the access its role requires and no more. Along the way, the module develops core systems administration and information security skills: reading a permission set as the resolved outcome of layered rules, tracing an account's effective access to the layer that governs it, and recognizing when permissions were inherited rather than chosen. The payoff is the ability to tighten the layer that decides an over-broad grant and confirm the change, before an audit names the exposure. It suits anyone learning identity and access management, file security, permission management, security hardening, or audit remediation for enterprise environments.

Storage runs out. Adding capacity to a running system without losing the data already there is one of the first hands-on tasks a systems administrator is trusted to handle. This module builds practical, cross-platform skills in storage administration, filesystem management, and disk capacity planning on both Linux and Windows. Learners work with block devices and volumes, create and format filesystems, mount and unmount storage, extend capacity safely, and make a mount persist across a reboot. Along the way, the module develops core skills in storage provisioning, capacity management, and data availability: seeing storage as a stack of layers, understanding how mounting attaches a filesystem to a directory, and growing space in the safe order rather than the destructive one. The payoff is the ability to add capacity where the work needs it and show that the data already there is intact. It suits anyone learning system administration, storage management, filesystem configuration, disk and volume management, data protection, or infrastructure and cloud operations.

This module builds practical skills in least-privilege access review and access governance across Linux and Windows. Learners run a basic user access review on a mixed estate. It is the kind of work also called an access audit, access certification, or access recertification. They read effective access from more than one source per platform, compare it against what each role justifies, and document the gap as a finding with a recommended fix. The module develops core identity and access management skills, including entitlement review, privilege creep detection, and least-privilege analysis. It explains why effective access is composed rather than declared — reach accumulates from a person's group memberships intersected with each object's permissions, so no single access-control list reveals it — and why a review reads and recommends rather than changes access. An interactive panel sets an identity's effective access beside what her role justifies, and the learner marks the difference. The payoff is a documented, defensible finding: the ability to show what an identity can really reach, where that exceeds its role, and what should be tightened, without changing anything during the read. It suits anyone learning access review, user access review, least privilege, privilege creep, entitlement review, identity and access management, access governance, or cross-platform systems administration.