Your network contains an Active Directory forest named contoso.com. You install System Center 2012 Virtual
Machine Manager (VMM) on a server named Server1. Users report that they fail to log on to the Virtual
Machine Manager Self-Service Portal (VMMSSP). You need to ensure that users call log on to the VMMSSP.
What should you do first?

A.
From the Virtual Machine Manager command shell, run the New-SCUserRole cmdlet and the Set
SCUserRole cmdlet.

B.
From Internet Information Services (IIS) Manager on Server1, modify the Authentication settings.

C.
From Authorization Manager, create a role definition and a role assignment.

D.
From the VMM Administrator Console, run the Create Run As Account Wizard

Explanation:
http://technet.microsoft.com/en-us/library/hh801722.aspx
TheNew-SCUserRole cmdlet creates a user role for a group of System Center Virtual MachineManager (VMM)
users. You can create the following user roles: Delegated Administrator, Read-Only Administrator, and SelfService User. Only one Administrator role exists;you cannot create another Administrator role or delete the
existing one. If you are a member of a Delegated Administrator user role, you can create a user role. However,
the scope of the new user role must be a subset of the scope of its parent user role.After you create a user role,
you can use the Set-SCUserRole cmdlet to rename the user role, to add or remove members, and to add or
modify the scope of objects that members of the role can manage. For a self-service user role, you can specify
which actions members of a self-service user role can take on their virtual machines, and you can define a
quota that limits the number of virtual machines self-service users can create. Although you cannot create or
remove the Administrator role or limit its scope,you can use Set-SCUserRole to add or remove members to that
role.