Admin1 must use the Microsoft Intune admin center to (1) create and assign apps and policies to users and devices and (2) create, assign, and delete Windows 365 Cloud PC provisioning policies. To follow least privilege and minimize administrative effort, which role assignment is appropriate for Admin1?

The Cloud PC Administrator role provides the necessary permissions to manage Windows 365 Cloud PCs, including creating, assigning, and deleting provisioning policies, as well as managing apps and policies for users and devices within Intune. This aligns perfectly with Admin1's required tasks while adhering to the principle of least privilege. The Help Desk Operator role has insufficient permissions for provisioning policies. The Cloud PC Reader role is read-only. Creating custom roles is unnecessary here as the built-in Cloud PC Administrator role already grants the required permissions, making it the option that minimizes administrative effort.