A database administrator needs to ensure only approved users can access specific database tables to perform financial functions. Which of the following is the best access control method for the…

Role-based access control (RBAC) is an ideal method for this scenario because it assigns permissions to specific roles (e.g., 'Financial Analyst', 'Accountant'), and then users are assigned to those roles. This allows for granular control over database tables and functions based on an individual's job responsibility, ensuring only approved users with the correct financial role can perform specific tasks.

Rule-based access control grants access based on a set of system-wide rules and conditions, which can be more complex to manage for simple user-to-resource mapping compared to roles.

Discretionary access control (DAC) allows the owner of a resource to grant or revoke access to other users, which can become unwieldy and inconsistent in a large organizational database context, and may not align with central policy control.

Group-based access control assigns permissions to user groups, which is similar to roles, but roles often imply a specific set of job functions with associated permissions, making RBAC a more precise fit for 'financial functions'.