What type of access control model is based on an individual’s roles and responsibilities within the organization?

What type of access control model is based on an individual’s roles and responsibilities within the organization?
A. access control list
B. non-discretionary access control
C. mandatory access control
D. discretionary access control