Watch this video on YouTube
Which form of access control makes it EASIEST to develop very granular and targeted access controls?