A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format. Which of the following should the administrator apply to the site recovery resource group?

RBAC (Role-Based Access Control) is the correct choice because it assigns permissions to users based on their defined roles within an organization, aligning directly with the administrator's goal of controlling access based on responsibilities. RBAC simplifies management by applying a set of permissions to a role, which can then be assigned to multiple users. ACLs (Access Control Lists) are more granular and assign permissions directly to individual users or groups for specific resources, which can become complex to manage at scale. SAML (Security Assertion Markup Language) is an authentication standard for single sign-on, not an access control mechanism. GPOs (Group Policy Objects) are used in Windows environments to manage user and computer settings, but they are not the primary mechanism for defining access control based on roles across various systems.