You need to provide a user named Marc with the ability to check out Group Policy objects (GPOs)

You have a single Active Directory Domain Services forest that consists of a single domain. You install Advanced Group Policy Management (AGPM). You need to provide a user named Marc with the ability to check out Group Policy objects (GPOs). What should you do?

A.
Assign Marcs user account the Editor role.

B.
Assign Marcs user account the Reviewer role.

C.
Add Marcs user account to the Domain Admins group.

D.
Add Marcs user account to the Group Policy Creator Owners group.