How to allow more than one role to access a private file?


I want to understand what would be the best way to give access to a private file to multiple roles.

We’ve office employees uploading their information documents and they are private of course we do not want to make them public because they are sensitive.

But we want the officer manager to access them. Currently trying to open those files throws a 403 because only the uploader of the file is allowed to access it.