Which two options would you use to restrict the functionality provided by a responsibility? (Choose two.)
A. creating an appropriate role
B. creating an appropriate group
C. constructing a new menu hierarchy
D. defining rules to exclude specific functions