which statement is correct?

When configuring management user authentication on a WLC, which statement is correct?

A.
You can configure an LDAP server to authenticate management users.

B.
You can configure users on the local WLC database with different authorization privileges for
specific menus.

C.
If the local database is selected as a second priority after RADIUS, the local WLC database will
not be used if the authentication fails through the RADIUS server.

D.
A lobby ambassador user can push new management users to the WLC through Cisco WCS.