A data engineering team is setting up access permissions for a new data lake containing sensitive customer information.
The requirement is to grant access based on a combination of an employee's department (e.g., 'Sales', 'Marketing'), their seniority level (e.g., 'Analyst', 'Manager'), and the data's sensitivity classification.
Access rights must be dynamic and reflect changes in an employee's role or data classification without manual intervention.
Which access control model is most suitable for this requirement?
