Your company has an Active Directory directory service domain. A server that runs Windows Server 2003 as an Enterprise certification authority (CA) has role separation enabled. You create a new Active Directory security group named CA Database Admins, and you assign the CA Administrator role to the security group. You disable role separation on the Enterprise CA. Members of the CA Database Admins security group are unable to delete more than one row at a time from the CA database.
You need to ensure that members of the CA Database Admins security group can delete multiple rows at a time from the CA database.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
Restart the Certificate Services service.

B.
Assign the Backup Operator role to the CA Database Admins security group.

C.
Assign the Certificate Manager role to the CA Database Admins security group.

D.
Remove the CA Administrator role from the CA Database Admins security group.