Which security groups must a user account be a member of to modify the AD RMS SCP?

Which security groups must a user account be a member of to modify the AD RMS SCP?
(Choose two answers. Each answer forms part of a complete solution.)

A.
Domain Admins

B.
AD RMS Enterprise Administrators

C.
Enterprise Admins

D.
Cryptographic Operators.