Which statements about user-based security groups are true?

The correct answers are B , D , and E .

User-based security groups are groups in which membership is manually assigned to individual users. They are highly flexible and used primarily for administrative or elevated-access purposes.

(B) These groups can be either constrained or unconstrained . Constrained groups limit data access (for example, access only to workers in a particular supervisory org), while unconstrained groups provide broad system-wide visibility.

(D) These groups are commonly used for system administrators, payroll admins, or HR system owners , who require full access across tenants.

(E) Once a user is assigned to a user-based group, they automatically inherit access to all domains and business processes that the security group has permissions for.

Option A is incorrect because user-based groups are not always unconstrained; and C is incorrect because assigning users does not initiate a business process —it’s a configuration action managed through the Maintain Security Group Members task.