which two levels can User Authorization privileges be defined?

At which two levels can User Authorization privileges be defined? (Choose two.)

A.
user level

B.
group level

C.
LDAP group level

D.
operating system user group level

E.
Tivoli Enterprise Monitoring Server level