Which permission is common to the Active Directory Join and Leave operations?

Which permission is common to the Active Directory Join and Leave operations?

A. Remove the Cisco ISE machine account from the domain. B. Search Active Directory to see if a Cisco ISE machine account already exists. C. Set attributes on the Cisco ISE machine account. D. Create a Cisco ISE machine account in the domain if the machine account does not already exist.