An organization is using an enterprise resource management (ERP) application. Which of the following would be an effective access control? 
A、User-level permissions 
B、Role-based 
C、Fine-grained 
D、Discretionary