What I am planning, is to make not with license, because You may not pay in time and lose all access, but to pay once, teach workers, support if needed, and then let go. Probably, I will think about it more in future, but for now either like this, or with only yearly subscription. Our solution still should solve access restrictions. If You are in the list of "valid" identities - You can read and write the data.

We can make a separation by departments also, however would You mind sharing what exactly is wrong with access restrictions?