Can I've an answer for the below question with good explanation.
You have an Azure subscription that contains a user account named User1. You need to ensure that User1 can assign a policy to the tenant root management group.
What should you do?
A . Assign the Owner role to User1, and then instruct User1 to configure access management for Azure resources.
B . Assign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources.
C . Assign the Global administrator role to User1, and then modify the default conditional access policies.
D . Assign the Owner role to User1, and then modify the default conditional access policies
