An access control method that assigns permissions to users based on their role within an organization, simplifying the management of user rights and enforcing the principle of least privilege.