Which two actions should you perform?

A company uses the vendor collaboration functionality within Dynamics 365 Supply Chain Management.

You must grant an external vendor permission to collaborate with the company. The system must send the vendor an invitation email. Emails must be sent to work email addresses only.

You need to configure user access

Which two actions should you perform? Each correct answer presents part of the solution. NOTE Each correct selection is worth one point.
A . Create a new Azure Active Directory tenant
B. Set up separation of duties
C. Provision a vendor user.
D. Assign user roles.

Answer: C,D