Full AWS Practitioner Certification Question

Dom needs to perform the following tasks: Create a new product role. Set a default group to that role. Which admin privileges does Dom needs to request?