Where would a Cisco ISE administrator define a named ACL to use in an authorization policy?

Where would a Cisco ISE administrator define a named ACL to use in an authorization policy?

A.
In the conditions of an authorization rule.

B.
In the attributes of an authorization rule.

C.
In the permissions of an authorization rule.

D.
In an authorization profile associated with an authorization rule.