Watch this video on YouTube
Which access control type has a central authority that determine to what objects the subjects have access to and it is based on role or on the organizational security policy?