ASP.NET provides a flexible authentication management system that allows an administrator to take advantage of the Windows authentication to identify “who” is the authenticated user accessing the site. Administrator can learn how to enable this and how it works by reviewing Recipe: Enabling Windows Authentication within an Intranet ASP.NET Web Application.
Furthermore, it is much easier to define higher level “roles” to map users into, and then grant / deny access or permissions based on these roles.