What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?

What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?
A. applications
B. network controls
C. operating systems
D. accounts and identities