フリー問題

問題文

Which practice correctly applies role-based access control to a multi-agent solution?

選択肢

1. Grant each agent's identity the narrowest built-in or custom role that covers the operations its own tools perform
2. Grant every agent the Contributor role on the resource group so no agent is ever blocked, and rely on the per-agent identities to keep the audit log attributable
3. Grant roles to individual users only, never to agent identities
4. Assign roles at the subscription scope so they do not need to be repeated per resource