A global corporation wants to delegate user management to regional IT teams while maintaining strict control over sensitive executive accounts. Which combination of actions should be taken to achieve this goal? A. Create standard administrative units for each region and a restricted management administrative unit for executives. B. Assign the User Administrator role with administrative unit scope to regional IT teams. C. Add executive user accounts to the restricted management administrative unit. D. Assign the Privileged Authentication Administrator role to regional IT teams for the executive administrative unit.