Which three components should an administrator select when configuring vSphere permissions? (Choose three.)

An inventory object must be selected to define the scope of the permission - it identifies which vSphere object or container the permission applies to.

A role must be selected because it bundles a set of privileges together, defining what operations the assigned principal is allowed to perform.

A user or group must be selected to identify the principal - the entity to whom the role is being granted on the specified inventory object.

Individual privileges are not selected directly when configuring a permission - they are pre-grouped into roles, and the role is selected as a unit during permission assignment.

Password is an authentication credential used for identity verification and is unrelated to the authorization model used when configuring vSphere permissions.