Which of the Following Statements Are True in Reference to the Permissions

Which of the following statements are true in reference to the permissions required for the Blue Prism Application Server service log on user? (Choose four.)

A) When a Blue Prism Server is configured with a SQL Server database connection that uses SQL Native Authentication, the service log on user needs SQL dbowner privileges
B) When the Blue Prism connection used by the server is configured to use SQL Native Authentication, the service log on user does not need any SQL privileges  
C) When a Blue Prism Server is configured with a SQL Server database connection that uses SQL Windows Authentication, the service log on user needs the minimum permissions on the appropriate Blue Prism SQL Server database as identified in the documentation
D) When using Single Sign on for the Blue Prism platform, the service log on user needs permission to query Active Directory Security Group membership
E) When using Single Sign on for the Blue Prism platform, the service log on user needs to be a Domain Administrator
F) When using Blue Prism native authentication for the Blue Prism platform, the service log on user needs to be a Domain Administrator
G) When configured to use a connection mode that uses Transport encryption, the service log on user needs read-access to the associated certificate's private key