In a corporate environment, a network administrator is tasked with implementing a role-based access control (RBAC) system to manage user permissions effectively. The organization has three distinct roles: Administrator, User, and Guest. Each role has specific permissions associated with it. The Administrator role can create, read, update, and delete resources, while the User role can only read and update resources. The Guest role is limited to reading resources only. If a new employee is assigned the User role, what would be the most appropriate method to ensure that this employee can only perform actions permitted by their role while also allowing for future scalability of the access control system?