A hospital hires a new billing clerk. Rather than manually assigning individual file and application permissions, the IT administrator adds the new employee's account to the 'Billing Clerk' group, which automatically grants the standard set of permissions every billing clerk needs. Which access control model is being used?