When an existing role that has been assigned to users is removed from vCenter Server

When an existing role that has been assigned to users is removed from vCenter Server,
which of the following can occur (Choose Two)?

A.
Users or groups are automatically assigned to the next most restrictive role available

B.
Users or groups that had privileges may no longer have any permissions in vCenter

C.
Users or groups can be reassigned to any available role

D.
Users or groups retain the removed role until they are manually assigned a new role

Explanation:
See below.