Correct:
* Identity Governance Administrator
* User administrator
Check catalog for resources
If you need to add resources to an access package, you should check whether the resources you need are available in the access package's catalog. I' you're an access'package manager, you can't add resour'es to a catalog, even if you own them. You're restricte' to using the resources available in the catalog.
Prerequisite role: Global administrator, Identity Governance administrator, User administrator, Catalog owner, or Access package manager.
In the Azure portal, select Azure Active Directory and then select Identity Governance.
In the left menu, select Catalog and then open the catalog.
In the left menu, select Resources to see the list of resources in this catalog.
Reference:
https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-resources