BBSM ships with several access policy modules. An access policy controls the web user interface that an end user experiences before the session is active, and it also monitors the end user's session while it is active. An integrator can create a new access policy module by writing a DLL in C++.