Access Control rules may be defined with which of the following permission requirements? (Choose three.)

ACLs can require one or more roles for a user to gain access to a record or field, making role-based access control a fundamental and widely used security mechanism.

Conditional expressions allow for dynamic access control based on specific field values, comparison operators, or other conditions evaluated at runtime, providing granular and context-aware access.

Assignment Rules are used to automatically assign tasks to users or groups based on predefined criteria, not to define access control permissions for records or fields.

Scripts offer the most flexible and powerful way to define access requirements within an ACL, allowing administrators to implement complex custom logic to determine whether a user has access to a resource.

While User Criteria are used to control access to Knowledge Bases, Service Catalog items, and other areas, they are not a direct permission requirement type configurable within an ACL definition itself.

Groups are a collection of users, and roles are assigned to groups, but an ACL directly specifies roles as a permission requirement, not groups directly.