You plan to deploy a PerformancePoint dashboard that will display data from a cube hosted in Microsoft SQL Server Analysis Services. The following identities are used by services and application…

You plan to deploy a PerformancePoint dashboard that will display data from a cube hosted in Microsoft SQL Server Analysis Services. The following identities are used by services and application pools:

• The Claims to Windows Token Service process identity is

contoso\C2WTS.

• The PerformancePoint application pool identity is contoso\SPPPS.
• The Secure Store application pool identity is contoso\SPSSS.
• The SQL Server Analysis Service identity is contoso\SQLAS.

You need to ensure that when a user connects to the dashboard, the user's credentials are used to connect to the cube. Which identities should you enable for Kerberos constrained delegation? (Each correct answer presents part of the solution. Choose all that apply.)