which role should you remove the employee?

Your company plans to use Office 365 and Microsoft SharePoint Online.
Another employee provisions the company’s Office 365 tenant. You discover that the employee can create and manage SharePoint site collections.
You need to prevent the employee from creating or managing site collections. From which role should you remove the employee?

A.
Service administrator

B.
SharePoint Online administrator

C.
Global administrator

D.
Site collection administrator