What Access Management Framework function determines what internal system users can access?

What Access Management Framework function determines what internal system users can access?

A. Authentication Realm

B. User Role
C. Resource Policy
D. Resource Profile

Reference: https://www-prev.pulsesecure.net/download/techpubs/current/606/pulse-policy-secure/pps/5.3rx/ps-pps-ic-5.3-device-access-management-framework.pdf (18)