Your network contains one Active Directory domain named contoso.com. The domain contains an IP Address
Management (IPAM) server named Server1. Server1 manages several DHCP and DNS servers.
From Server Manager on Server1, you create a custom role for IPAM.
You need to assign the role to a group named IP_Admins.
What should you do?

A.
From Windows PowerShell, run the Add-Member cmdlet.

B.
From Server Manager, create an access policy.

C.
From Windows PowerShell, run the Set-IpamConfiguration cmdlet.

D.
From Server Manager, create an access scope.

Explanation:
A role is a collection of IPAM operations. You can associate a role with a user or group in Windows using an
access policy. Several built-in roles are provided, but you can also create customized roles to meet your
business requirements.
Manage IPAM, Access Control
https://technet.microsoft.com/en-us/library/dn741281.aspx