Your company has an Active Directory Domain Services (AD DS) domain. You have a Visual Studio Team Foundation Server 2010 environment. You have a team project created by using the MSF for Agile Software Development v5.0 build process template. You install and configure Visual Studio Team Web Access in the environment. You need to ensure that when a specific user connects to Team Web Access, only the Work Item Only View is available.
What should you do?

A.
In Visual Studio Team Explorer 2010, add the user to the Readers team project security group.

B.
In the Team Foundation Server Administration Console, add the user to the Work Item Only View Users security group.

C.
In the Team Foundation Server Administration Console, deny the View instance-level information permission for the Team Foundation Valid Users security group.

D.
Create an AD DS security group named Work Item Only View Users and add the user to the security group. Edit the web.config file of the Team Web Access site to add a Work Item Only View Users application setting, and set it to the name of the AD DS security group.