A company has implemented Azure Information Protection, a newly joined user is unable to access Azure Information Protection. 
Which two of the following roles would enable Azure Information Protection access to the user?

Answer options:

A.Information Protection Administrator
B.Cloud Application Administrator
C.Security Administrator
D.Group Administrator

Answer: A, C 
Option A is CORRECT because please see the reference url for the AIP roles list 
Option B is incorrect because Cloud Application Administrator is part of Application Administrators 
Option C is CORRECT because please see the reference url for the AIP roles list 
Option D is incorrect because Group Administrator has access to Administrative features 
Diagram: 

Reference:

https://docs.microsoft.com/en-us/azure/information-protection/configure-policy