Which two permissions need to be enabled to set up entitlement management, including milestones, entitlement processes, and entitlement templates? (Choose two.)