Which two are true concerning authorization within a Cisco Unified Computing System? (Choose two.)

[answerhappygod]

Which two are true concerning authorization within a Cisco Unified Computing System? (Choose two.)

A. A role defines a collection of privileges that determines which actions a user can take in Cisco Unified Computing System Manager.
B. Authorization consists of three components (roles, password policy, and locales) that are based on which features and resources the user will not have access to.
C. Customized roles can be configured on and downloaded from remote AAA servers.
D. The logical resources, pools and policies, are grouped into roles.
E. If the service profile cannot find available resources, it will search in the parent organization for pools and resources.