Role-Based Access Control. Permissions assigned based on job role. Changing an employees role automatically updates all permissions.
Want to actually apply concepts like this instead of just reading definitions?