Active Directory (AD) is an excellent file and folder permissions, security, and management tool. It allows administrators to give permission to access specific folders to specific users. Simply put, ...
You should be able to use either subinacl or xcacls to do both tasks. I don't see why you would need two tools.