A company needs to create a Microsoft Power Platform app. The app will manage sensitive information about employees. The app must provide employee information only to the employee's immediate manager and that person's manager. If an employee transfers to a different division, access transfers to the employee's new manager and that person's manager. Which security model should you recommend