The STIG requires that all users execute under a selinux context

Physical administrators should be mapped to staff_u

• This would be our default administrators group

Automated administrators should be mapped to sysadm_u

Regular users should default to user_u