Hi Sean,
Hope you are doing well.
To answer your question, if you don’t have additional criteria and want to grant user an Access Profile purely based on LCS, it’s better to assign it via LCS Provisioning. The user will get the access and retain it while they are in the same LCS. As soon as the LCS changes, the access will be removed.
In cases where you have additional criteria like combination of LCS, job code, department, user type etc involved for granting access, it’s better to go with roles.