You are a database developer and you have about two years experience in creating business intelligence (BI) solutions by using SQL Server2008.

Now you are employed in a company which is named NaproStar and you are in charge of a SQL Server 2008 Analysis Services (SSRS) database for the company.
The database contains a Human Resources cube and a dimension named Salesman.

According to the business requirements, a role named Administrator should be updated for the cube.
After the update, you attempt to have the security deployed for the Administrators role.

Now you are assigned a task to prevent the Administrators role from accessing the aggregate data that based on more than three salesmen.
Which options below should be chosen to accomplish this task?

A.
The expression of IIF(Descendants([Salesman].[Salesmen].CurrentMember,,LEAVES).Count <= 3, [Salesman].[Salesmen].CurrentMember, null) should be added to the Allow Reading property in Cell Data in the Administrators role.

B.
Members of the [Salesman].[Salesmen] hierarchy that contain three or less children should be added to the denied set for the Administrators role.

C.
Members of the [Salesman].[Salesman] hierarchy that contain more than three children should be added to the allowed set for the Administrators role.

D.
The expression of Descendants([Salesman].[Salesmen].CurrentMember,,LEAVES).Count <= 3 should be added to the Allow Reading property in Cell Data in the Administrators role.