An organization would like to implement an authorization mechanism that would simplify the assignment of various system access permissions for many users with similar job responsibilities. Which type

RBAC assigns permissions to roles (e.g., 'Manager', 'Analyst') rather than to individual users, so administrators simply assign users to appropriate roles based on their job function. This significantly reduces administrative overhead when many users share similar responsibilities, as changing a role's permissions automatically updates access for all members of that role.

Discretionary Access Control (DAC) allows resource owners to individually grant or restrict access to their own resources, which does not simplify bulk permission assignment for groups of users with similar roles.

Content-dependent Access Control makes authorization decisions based on the actual content or data being accessed (e.g., a database field value), not on user job responsibilities, making it unsuitable for simplifying user permission assignments.

Rule-based Access Control applies access decisions based on predefined system-wide rules or conditions (e.g., time of day, IP address), rather than grouping users by job function, so it does not simplify managing permissions for users with similar responsibilities.