With role-based access, permissions are attached to roles such as driver, estimator, branch manager or finance, and people are given the role that matches their job. A driver sees their runs, a manager sees the branch, and only finance sees the payment details.
It keeps people focused on what they need and limits the damage from mistakes or misuse. When someone changes job or leaves, you change or remove their role rather than hunting for individual settings. It also supports data protection duties, because personal and sensitive records are seen only by those with a reason to see them.