When defining membership for a security group, which three identifiers can be used for dynamic inclusion? (Choose three.)