An administrator is creating a new business group with the following requirements:
IT_Supervisors@vclass.local will need to be able to provision on behalf of users within the group.
IT_Managers@vclass.local will need to be able to configure entitlements only for this group.
Which two options below will minimally accommodate this design without providing additional privileges?
(Choose two.)

A.
Add the following to the Support role: IT_Supervisors@vclass.local

B.
Add the following to the Group Manager role: IT_Managers@vclass.local

C.
Add the following to the Tenant Administrator role: IT_Managers@vclass.local

D.
Add the following to the Group Manager role: IT_Managers@vclass.local, IT_Supervisors@vclass.local