As you create a controller in Magento's adminhtml area, you must configure it to respond appropriately to the ACL.
Keeping simplicity in mind, what steps do you take to implement this?