Which of the following access control types would give a system administrator the ability to assign access according to least privilege?

Role-Based Access Control (RBAC) assigns permissions based on a user's organizational role, which simplifies management but doesn't inherently give an administrator granular control to assign least privilege on a per-user, per-resource basis without predefined roles.

Rule-Based Access Control grants access based on a set of predefined rules and conditions, often used in network security devices, not for granular user permission assignment by an administrator to enforce least privilege.

Discretionary Access Control (DAC) permits the owner or an authorized administrator of a resource to define who can access it and what operations they can perform, making it the most direct method for an administrator to grant specific, minimal privileges to users based on their individual needs. This model empowers the resource owner to explicitly grant or deny access, aligning directly with the least privilege principle.

Mandatory Access Control (MAC) enforces a strict, system-wide security policy based on sensitivity labels, where access decisions are made by the operating system or security kernel, overriding any user or administrator discretion.