问题：

[单选]

All servers in your environment run Windows Server 2008 R2. You are planning a Microsoft System Center Virtual Machine Manager （VMM） 2008 R2 Self-Service Portal deployment.  
You need to ensure that members of the Security Compliance group can create new virtual machines （VMs）.  You install the VMM 2008 R2 Self Service Portal and add the Security Compliance group to the Self Service host group. 
What should you do next？（）

A . Assign the computer accounts for all Hyper-V servers the Read permission to the library share and NTFS folders. Grant the Log on as a service right to the Security Compliance group
B . Assign the service account for the Hyper-V Image Management Service the Read permission to the library share and NTFS folders. Grant the Log on as a service right to the service account for the Hyper-V Image Management Service
C . Configure the self-service user role to create new VMs. Add the Security Compliance group to the self-service user role. Grant members of the self-service user role access to the library share
D . Configure constrained delegation for the Security Compliance group on the library server. Grant the Log on as a service right to the service account for the Hyper-V Image Management Service