Which statements describe the capabilities of the DBMS_NETWORK_ACL_ADMIN package?（）

AIt can be used to allow the access privilege settings for users but not roles.

BIt can be used to allow the access privilege settings for users as well as roles.

CIt can be used to control the time interval for which the access privilege is available to a user.

DIt can be used to selectively restrict the access for each user in a database to different host computers.

EIt can be used to selectively restrict a user's access to different applications in a specific host computer.