You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM acce...

You develop a solution that uses Azure Virtual Machines (VMs).
The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager.
You need to obtain an access token that uses the VM's system-assigned managed identity.
Which two actions should you perform? Each correct answer presents part of the solution.

A. From the code on the VM, call Azure Resource Manager using an access token. B. Use PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint. C. Use PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint. D. From the code on the VM, call Azure Resource Manager using a SAS token. E. From the code on the VM, generate a user delegation SAS token.