The following cannot be configured in an Access Role Object:Time4.An Access Role Object is a way to define a group of users based on four criteria: Networks, Users, Machines, and Locations5. Networks are IP addresses or network objects that represent the source or destination of the traffic. Users are user accounts or user groups from an identity source such as LDAP or RADIUS. Machines are endpoints that are identified by MAC addresses or certificates. Locations are geographical regions based on IP addresses. Reference:Check Point R81 Firewall Administration Guide,Check Point R81 Identity Awareness Administration Guide