An organization has implemented a new network management system that requires different levels of access for various job roles. System administrators should have the ability to configure network devices, view configurations, and access logs. On the other hand, network analysts should only have the ability to view configurations and access logs, but not make changes to network devices. Which of the following access control policies should be applied to ensure that the principle of least privilege is upheld?
Mandatory Access Control (MAC)
Attribute-based access control (ABAC)
Discretionary Access Control (DAC)
Role-based access control (RBAC)