A server administrator is configuring access control on a file server for an organization. The Human Resources manager is taking a leave of absence for three months, during which time an interim…

MAC (Mandatory Access Control) enforces access based on system-assigned security labels and classification levels, not on organizational roles or job positions.

CBAC (Context-Based Access Control) is a Cisco IOS stateful firewall packet inspection feature, not a file server access control model for managing user or role-based permissions.

DAC (Discretionary Access Control) lets individual resource owners manually set permissions for specific users, which would require an administrator to manually reconfigure access each time a role changes hands rather than inheriting it from a role definition.

RBAC grants permissions based on organizational roles rather than individual user identities, so when the interim HR manager is assigned the HR role on the file server, they automatically inherit all access rights associated with that position. This eliminates the need to manually reassign or copy permissions for a temporary replacement and makes role transitions efficient, auditable, and consistent.