You need to provide users in the research department access to different functions of the Web-based research application based on individual user roles. What should you do？（）

• A、Use Windows directory service mapper and enable Microsoft .NET Passport authentication
• B、Create authorization rules and scopes by using Authorization Manager
• C、Use one-to-many client certificate mapping
• D、Define permissions by using access control lists （ACLs）