Which vRealize Automation role has permissions to create Custom Groups?

Which vRealize Automation role has permissions to create Custom Groups?
A. Fabric Administrator
B. Business Group Manager
C. Tenant Administrator
D. Catalog Administrator