Assigns access permissions by role or job function, ensuring users have only the minimum necessary permissions.