Which statement about RBAC user roles on a Cisco Nexus switch is true?

Which statement about RBAC user roles on a Cisco Nexus switch is true?

A.
If you belong to multiple roles, you can execute only the commands that are permitted by both
roles (logical AND).

B.
Access to a command takes priority over being denied access to a command.

C.
The predefined roles can only be changed by the network administrator (superuser).

D.
The default SAN administrator role restricts configuration to Fibre Channel interfaces.

E.
On a Cisco Nexus 7000 Series Switch, roles are shared between VDCs.