You want to limit an authorization administrator so that they can only assign certain authorizations

You want to limit an authorization administrator so that they can only assign certain authorizations. Which authorization object should you use?

A. S_USER_AGR

B. S_USER_ADM

C. S_USER_TCD

D. S_USER_VAL