You may have some documents with a standard format text, like social security numbers or credit card numbers, in various folders within a file share. By defining the standardized format of what you want to secure, the Windows FSRM (File Server Resource Manager) can automatically set an attribute on the file and restrict access based on that attribute.
Generate audit reports of who exactly has accessed, or attempted to access files identified based on their content.
If the workstations have Windows 8 or later, users who attempt to access a document can get a custom-defined message that will enable them to request access, so the owner of the document may decide (without going through support) to allow access.
These are security features available in the Windows Server 2016 role File Server Resource Manager.