In this access control method permissions aren’t assigned to users directly. The permissions are assigned to security groups based on which permissions are needed to perform a certain job function then the user is assigned to security groups as needed.
RuBAC
ABAC
RBAC