Which component is optional in the Oracle Content Server security model?

Which component is optional in the Oracle Content Server security model?

A.
Security Group

B.
Role

C.
Account

D.
Permission