MDFT Pro, a well-known training agency, stores extensive educational content including course videos, training documents, and student project files in Azure Storage blob containers. Claire, the Data Access Administrator, needs to grant User1 access to specific blob data in storage account named storage1 while implementing conditional access policies for enhanced security.
Mark, the Storage Access Coordinator, must identify which roles support conditional access policies when assigning blob data permissions to ensure secure and controlled access to educational content.
The company requires fine-grained access control to ensure that users can only access educational content under specific conditions, such as from approved devices, during business hours, or from certain geographic locations. The role assignment must support Azure RBAC conditions to enforce these security policies while providing appropriate access to the educational materials stored as blob data.
The security team has mandated that all blob data access must support conditional access policies to comply with their data governance framework and protect sensitive educational intellectual property from unauthorized access.
Which two roles can Claire assign to User1 to meet both the blob data access and conditional access requirements?
Choose all correct answers from the options below.
Explanations for each answer: