You are setting up a new AlloyDB instance and want users to be able to use their existing Identity and Access Management (IAM) identities to connect to AlloyDB. You have performed the following steps:
• Manually enabled IAM authentication on the AlloyDB instance
• Granted the alloydb.databaseUser and ser-viceusage.serviceUsageconsumer IAM roles to the users
• Created new AlloyDB database users based on corresponding IAM identities
Users are able to connect but are reporting that they are not able to SELECT from application tables. What should you do?

A. Grant the new database users access privileges to the appropriate tables. B. Grant the alloydb.client IAM role to each user. C. Grant the alloydb.viewer IAM role to each user. D. Grant the alloydb.alloydbreplica IAM role to each user.