To qualify as an Identity Awareness enabled rule, which columns may include an Access Role?

To qualify as an Identity Awareness enabled rule, which columns may include an Access Role?

A.
Track

B.
Action

C.
Source

D.
User