In which two vsphere.local groups should an administrator avoid adding members? (Choose two.)

SolutionUsers is reserved exclusively for internal vSphere solution accounts such as vCenter Server and the vSphere Web Client service. Adding regular user accounts to this group can break internal component-to-component authentication within the SSO domain.

The vsphere.local Administrators group grants unrestricted administrative control over the vCenter Single Sign-On domain and all registered solutions. VMware explicitly recommends against adding members here to prevent unintended privilege escalation across the entire vSphere environment.

DCAdmins is not flagged by VMware as a group to avoid populating; it does not carry the same internal system-reservation risk as SolutionUsers or Administrators.

ExternalPDUsers holds accounts synchronized from external identity providers and does not have the same internal-use restrictions that make SolutionUsers and Administrators groups dangerous to modify.