Which of the following illustrate the simplification of user and role maintenance on SAP Cloud? (Choose two.)

A. Read and write access can be restricted.

B. Business users have business roles.

C. Templates are provided for role derivation.

D. Business roles are automatically provisioned.