What is (are) best practice(s) regarding users/groups/roles? (Choose two.)

This is incorrect; assigning roles to groups is a fundamental best practice for efficient permission management.

While technically possible, assigning roles directly to individual users is generally discouraged as a best practice because it can lead to complex and difficult-to-manage permission sets, especially in large organizations.

It is considered a best practice to add users to groups, which simplifies user administration by consolidating permissions. Users inherit permissions from their assigned groups, making access management more efficient and scalable.

Assigning roles to groups is a fundamental best practice as it centralizes permission management; changes to a group's roles automatically apply to all members, ensuring consistent access control and reducing administrative overhead.