You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principl...

You have an Azure subscription that contains a user named User1.
You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege.
What should you do?

A. Create a management group and assign User1 the Hybrid Identity Administrator Azure Active Directory (Azure AD) role. B. Create a management group and assign User1 the Managed Identity Operator role. C. Create a resource group and assign User1 to the Managed Identity Contributor role. D. Create an organizational unit (OU) and assign User1 the User administrator Azure Active Directory (Azure AD) role.