You are creating an internal App Engine application that needs to access a user`s Google Drive on the user`s behalf. Your company does not want to rely on the current user`s credentials. It also wants to follow Google-recommended practices. What should you do? 

Answer options:

A. Create a new Service account, and give all application users the role of Service Account User.
B. Create a new Service account, and add all application users to a Google Group. Give this group the role of Service Account User.
C. Use a dedicated G Suite Admin account, and authenticate the application`s operations with these G Suite credentials.
D. Create a new service account, and grant it G Suite domain-wide delegation. Have the application use it to impersonate the user.

A