A hospital IT team is redesigning permissions for a new electronic health records system. They want nurses, billing clerks, and physicians to each receive a standardized set of permissions automatically when hired, based purely on their assigned job function rather than individual assignment or data classification labels. Which access control model best fits this requirement?