You install a read-only domain controller （RODC） named RODC1.   You need to ensure that a user named User1 can administer RODC1. The solution must minimize the number of permissions assigned to User1.   Which tool should you use（）

• A、Active Directory Administrative Center
• B、Active Directory Users and Computers
• C、Dsadd
• D、Dsmgmt