You have an Azure subscription that contains a user named User1.
You need to ensure that User1 can perform the following tasks:
• Create groups.
• Create access reviews for role-assignable groups.
• Assign Azure AD roles to groups.
The solution must use the principle of least privilege.
Which role should you assign to User1?

A. Groups administrator B. Authentication administrator C. Identity Governance Administrator D. Privileged role administrator