Which components can use Active Directory authorization attributes for the decision-making process? (Select two.)