IAM

Role-based access control RBAC

Granting access based on a person's role — paralegal, bookkeeper, partner — rather than configuring permissions one person at a time.