Watch this video on YouTube
In a scenario where access is determined by a combination of attributes, such as user role and department, which access control type is most appropriate?