Which role is required in order to configure vCenter Single Sign-On?

An administrator is trying to configure vCenter Single Sign-On from the vSphere Client but does NOT have permission.
Which role is required in order to configure vCenter Single Sign-On? (Choose the best answer.)
A. vCenter Single Sign-On Administrator
B. vCenter Administrator
C. vCenter Server Appliance Root
D. vCenter Power User