What is the best way to approach this

Lets say I have a group of employess. In this group of employees there are 3 access levels.

Access Level 1 can do basic functions no access, Level 2 basic functions plus secret access, Level 3 all functions plus top secret access

What is the best way to design definitions based on this? So that anywhere in the program I can call up the access level for the employee using the program and check his/her level and all functions they are allowed to use.


3 separate classes, interfaces, else?

I would use Roles class for checking the access level and own implementation of RoleProvider, or choose one of framework's implemetations.