You network contains an on-premises Active Directory domain. The domain contains a universal security group named AVDusers. You have a hybrid Azure Active Direc...

You network contains an on-premises Active Directory domain. The domain contains a universal security group named AVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. AVDusers syncs to Azure AD.
You have an Azure Virtual Desktop host pool that contains four Windows 10 Enterprise multi-session hosts.
You need to ensure that only the members of AVDusers can establish Azure Virtual Desktop sessions to the host pool.
What should you do?

A. Assign AVDusers to an Azure role scoped to each host pool. B. On each session host, add AVDusers to the local Remote Desktop Users group. C. Assign AVDusers to an Azure role scoped to the session hosts. D. Assign AVDusers to an application group.