A. The logical resources, pools and policies, are grouped into roles.

B. Customized roles can be configured on and downloaded from remote AAA servers.

C. A role contains a set of privileges which define the operations that a user is allowed to take.

D. When a user has both local and remote accounts, the roles defined in the remoteuser account override those in the local user account.

E. A locale without any organizations, allows unrestricted access to system resources in all organizations.