What is a valid use case for the No Access role?

What is a valid use case for the No Access role?

A.
An administrator wants to prevent a user from launching the vSphere Client

B.
An administrator wants to allow only the status of an object to be viewed, but provide no other access

C.
An administrator wants to allow the state and details of an object to be viewed, but provide no other access

D.
An administrator wants to revoke permissions on an object that would otherwise be propagated

Explanation:
Mastering VMware vSphere 4, page 387.
The No Access role can be used if a user was granted access higher up in the inventory.