Which three components should an administrator select when configuring vSphere permissions? (Choose three.)