Which of the following is NOT defined by an Access Role object?

Source Network is a valid Access Role component, allowing the role to be scoped to traffic originating from one or more specific IP network ranges.

Source Machine is a valid Access Role component, enabling machine-identity enforcement by specifying which registered endpoint devices are included in the role.

Source User is a valid and primary Access Role component, specifying which Active Directory users or user groups the identity-aware policy applies to.

Check Point Access Role objects are identity-aware constructs used in the source column of Access Control Policy rules, and their valid components are limited to Networks, Machines, and Users. 'Source Server' is not a valid Access Role attribute because servers are typically destination resources in a policy, not identity-based source principals. Attempting to define a server as a source access role component is conceptually incorrect within the Identity Awareness framework.