How granular may an administrator filter an Access Role?

How granular may an administrator filter an Access Role?

A.
Windows Domain

B.
AD User

C.
Radius Group

D.
Specific ICA Certificate