How should changes in user roles be handled in an identity-based Zero Trust framework?

How should changes in user roles be handled in an identity-based Zero Trust framework?

User roles should remain static to maintain simplicity in access management.
A . Access rights should be dynamically adjusted to reflect changes in user roles and responsibilities.
B . Users should request access through a manual process each time their role changes.
C . Role changes should be ignored to avoid administrative overhead.

Answer: B