An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?

An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?
A. member of
B. group
C. class
D. person