When the "balance" is decided at the discretion of users, the access control is called Discretionary Access Control (DAC) that is more tolerant of actions that manage risk where MAC requires risk avoidance.
The access control is called Discretionary Access Control (DAC). These Discretionary Access Control (DAC) is more tolerant of actions. These actions manage risk. MAC requires risk avoidance. The "balance" is decided at the discretion of users.