Which are true of Snowflake roles?

Which are true of Snowflake roles?
A . All grants to objects are given to roles, and never to users
B . In order to do DML/DOL, a user needs to have selected a single role that has that specific access to the object and operation
C . The public role controls at other roles
D . Roles are a subset of users and users own objects In Snowflake

Answer: A,B