Hi @PeterWang,
One of my clients in the financial services space groups their data using a domain-centric approach like customer, deposit, wealth, and credit.
We tag tables and views with these domains and use that for RBAC, so access is granted based on the domain.
Since we already rely on tags, I think moving towards ABAC in the future would make things more scalable and easier to manage in the long run.