Access control based off the role of the user. Each job role will have a different access policy. It adheres to Principle of Least Privilege, giving users enough access for them to do their job.