An administrator is creating accounts based on departments within the company. Which of the following access models does this BEST represent?

Non-discretionary access is a broad term that includes mandatory access control and role-based access control, but RBAC is a more specific and accurate fit.

Mandatory access control (MAC) is a more rigid access control model where access decisions are based on security labels assigned to subjects and objects, typically used in high-security environments.

Discretionary access control (DAC) allows resource owners to define permissions for other users, which would be inefficient and inconsistent for managing access across departments.

Role-based access control (RBAC) assigns permissions to users based on their roles within an organization, such as "Accounting Department" or "Sales Department." Users inherit permissions associated with their assigned roles, simplifying access management and ensuring appropriate access levels are maintained consistently.