A company started using ACL to manage access control of its ten employees. Eventually, with the growth of the business, they hired $150$ employees. As a result, the mapping between subjects and objects in their ACL becomes too complicated and difficult to manage.

The company authority is now looking for an alternative access control solution to address this issue. Can you suggest a solution and explain how this solution might address their issue?