When Should a Role Mapping Policy Be Used in an 802.1x

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

A) When you want to match Active Directory attributes directly to an enforcement policy.
B) When you want to match Active Directory attributes to an Aruba firewall role on an Aruba Network Access Device.
C) When you want to translate and combine Active Directory attributes into ClearPass roles.
D) When you want to enable attributes as roles directly without combining multiple attributes.