Which role is required for a user/group that creates and modifies Groups and Roles?

Which role is required for a user/group that creates and modifies Groups and Roles?

A.
iscadmins

B.
ncw_admin

C.
configurator

D.
administrator