Which configuration is necessary to retrieve groups from Panorama?

A company wants to use their Active Directory groups to simplify their Security policy creation from Panorama.

Which configuration is necessary to retrieve groups from Panorama?
A . Configure an LDAP Server profile and enable the User-ID service on the management interface.
B . Configure a group mapping profile to retrieve the groups in the target template.
C . Configure a Data Redistribution Agent to receive IP User Mappings from User-ID agents.
D . Configure a master device within the device groups.

Answer: D

Explanation:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFQCA0