What is the highest object level from which a virtual machine can inherit privileges?

Which three Authorization types are valid in vSphere? (Choose three.)

Which three components should an administrator select when configuring vSphere permissions? (Choose three.)

In which two vsphere.local groups should an administrator avoid adding members? (Choose two.)

An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments.

Which statement best describes how the administrator would accomplish this?