Sounds like you just described AD permissions on a file server

Or Nextcloud

Or *nix perms (and, possibly, ACLs) on a NFS device