Which three actions should you perform in sequence?

Explanation/Reference:
Note:
*(box 1, box 2) If you want all role members to share ownership of all virtual machines that any member creates, create a security group in Active Directory and assign that group to the user role.
*(box 3) For a self-service user to deploy a virtual machine from a template, the following is required:
/The self-service user role must have the Deploy or Deploy (From template only) actions in their user role scope.
/ The template must be available to the self-service user role as an assigned resource, or the self-service user role must be granted access in the template properties.