A company wants to grant access to identity administrators who are completing similar tasks. Which of the following access control models should the company use...