In enterprise web solutions, there is often a requirement authorization in attribute data level.

So it maybe to be consider creating authorization using a combination of RBAC and ABAC to assign users at the data attribute level.

For example, even though they have "the same role" access with the "Contacts" menu access authorization, the data displayed is different. For example, User A can access the "Contacts" menu with all its data regardless of the "Stage", while User B can access the "Contacts" menu but with limited data, for example, the "Stage" is only "Leads"

Thank you