What is the default policy when defining role-based access for a VSAN?

What is the default policy when defining role-based access for a VSAN?

A.
Deny

B.
Permit

C.
Permit only for the default VSAN.

D.
There is no default role policy for a VSAN.