Which of the following is a best practice for managing user rights and privileges?

A.
Enroll users in a biometric authentication system, deploy biometric hardware to the client
computers, and grant rights and privileges.

B.
Identify roles and objects to be accessed, create groups, and grant rights and privileges based
on groups.

C.
Create a list of departments, create a folder for each department, meet with the departments
and direct them to access their departmental folder.

D.
Create a certificate authority, issue certificates to each user, assign rights and privileges based
on individual certificates.