C. The permissions needed to join ISE to AD are Search Active Directory (to see whether ISE machine account already exists),