Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will he use?

Discretionary Access Control (DAC) allows resource owners to control access at their own discretion, which does not systematically enforce least privilege across the organization.

Mandatory Access Control (MAC) uses security labels and classifications set by policy to control access, typically used in high-security government environments, and is not primarily designed for role-based resource restriction.

Policy Access Control is not a recognized standard access control model in information security frameworks.

RBAC assigns permissions to roles rather than to individual users, and users are then assigned to the appropriate role. This ensures employees can access only the resources their job function requires, which directly satisfies the administrator's goal of limiting access to only necessary resources.