The correct answers are B, D, and E.
User-based security groups are groups in which membership is manually assigned to individual users. They are highly flexible and used primarily for administrative or elevated-access purposes.
* (B) These groups can be either constrained or unconstrained. Constrained groups limit data access (for example, access only to workers in a particular supervisory org), while unconstrained groups provide broad system-wide visibility.
* (D) These groups are commonly used for system administrators, payroll admins, or HR system owners, who require full access across tenants.
* (E) Once a user is assigned to a user-based group, they automatically inherit access to all domains and business processes that the security group has permissions for.
Option A is incorrect because user-based groups are not always unconstrained; and C is incorrect because assigning users does not initiate a business process-it's a configuration action managed through the Maintain Security Group Members task.
Reference: Workday Pro HCM - Security Configuration and Administration, "User-Based Security Group Behavior and Permissions" section.