A growing company has struggled with inconsistent file permissions because individual data owners keep granting access to coworkers at their own discretion, creating a tangle of ad-hoc rights. Leadership wants access decisions based strictly on employees' job functions and managed centrally so that when someone changes positions their access changes automatically. Which access control model best meets this requirement?