Which two types of objects can be restricted by using RBAC?

Within Cisco UCS Manager, which two types of objects can be restricted by using RBAC? (Choose two.)
A. RADIUS
B. service profiles
C. users
D. locales
E. roles