Which of These Is Not a Principle You Should Apply

Multiple Choice

Which of these is not a principle you should apply when setting roles and permissions?

A) Whenever possible, assign roles to groups instead of to individuals.
B) Grant users the appropriate permissions to facilitate least privilege
C) Whenever possible, assign primitive roles rather than predefined roles.
D) Audit all policy changes by checking the Cloud Audit Logs.