Your network contains an Active Directory forest named contoso.com.
You install System Center 2012 Virtual Machine Manager (VMM) on a server named Server1.
Users report that they fail to log on to the Virtual Machine Manager Self-Service Portal (VMMSSP).
You need to ensure that users call log on to the VMMSSP.
What should you do first?

A.
From the Virtual Machine Manager command shell, run the New-SCUserRole cmdlet and the Set-SCUserRole cmdlet.

B.
From Internet Information Services (IIS) Manager on Server1, modify the Authentication settings.

C.
From Authorization Manager, create a role definition and a role assignment.

D.
From the VMM Administrator Console, run the Create Run As Account Wizard

Explanation:
http://technet.microsoft.com/en-us/library/hh801722.aspx
The New-SCUserRole cmdlet creates a user role for a group of System Center Virtual MachineManager (VMM) users.
You can create the following user roles: Delegated Administrator, Read-Only Administrator, and Self-Service User.
Only one Administrator role exists; you cannot create another Administrator role or delete the existing one.
If you are a member of a Delegated Administrator user role, you can create a user role.
However, the scope of the new user role must be a subset of the scope of its parent user role.
After you create a user role, you can use the Set-SCUserRole cmdlet to rename the user role, to add or remove members, and to add or modify the scope of
objects that members of the role can manage.
For a self-service user role, you can specify which actions members of a self-service user role can take on their virtual machines, and you can define a quota that
limits the number of virtual machines self-service users can create.
Although you cannot create or remove the Administrator role or limit its scope, you can use Set-SCUserRole to add or remove members to that role.