Which of the following is true about group$-$based access controls?

A$.$ An individual can be assigned to only one group.

B$.$ Belonging to a group absolves the individual of any security accountability.

C$.$ Differing groups can have differing permissions, such as one group having read and another having read and write.

D$.$ Individuals in a group are not required to log in with a username and password.