As an Identify domain administrator, you can manage users in Oracle Identity Management and assign predefined roles to users while creating them. When a user has access to Cloud EPM Planning, Service Administrators can grant roles to many users at the same time. Which two statements are true about user and group security?