How is access control permissions established in the RBAC access control model?

A.
The system administrator.

B.
The owner of the resource.

C.
The role or responsibilities users have in the organization.

D.
None of the above.