An administrator is creating a new business group with the following requirements: ✑will need to be able to provision on behalf of users within the group. ✑will need to be able to configure entitlements only for this group. Which two options below will minimally accommodate this design without providing additional privileges? (Choose two.) 

AB