Which three components should an administrator select when configuring vSphere permissions? (Choose three.)

The Inventory Object specifies the target in the vSphere hierarchy to which the permission applies, such as a datacenter, cluster, host, or virtual machine. Without selecting an inventory object there is no scope for the permission to be enforced.

The Role is a named collection of privileges defining what operations are permitted on the selected object. Roles can be built-in (such as Administrator or Read-Only) or custom, and must be paired with a user/group and an inventory object to form a complete permission.

The User/Group identifies the principal - either an individual user or a group from a connected identity source or vsphere.local - that receives the assigned role. Selecting a user or group completes the three-part permission definition along with the inventory object and role.

Privileges are the individual action rights that compose a role and are not selected directly during permission assignment - the role (which bundles privileges) is what gets assigned.

Password is an authentication credential used during login and plays no part in defining or assigning a vSphere permission.