An Azure subscription contains a storage account named storage1 that holds blob data. You must assign a role to User1 that allows access to the blob data and supports conditional role assignments. Which two roles can you assign to User1?

The Storage Blob Data Contributor and Storage Blob Data Owner roles are data-plane roles specifically designed for accessing blob data within a storage account. These roles support conditional role assignments, which is a key requirement. The Storage Blob Data Contributor role allows read, write, and delete access to blob containers and blobs. The Storage Blob Data Owner role provides full access to blob data, including the ability to set ownership and manage access to blobs. The Owner role is a management-plane role that grants full access to all resources in a subscription, but it's not specific to blob data and might grant more permissions than necessary. Storage Account Contributor is also a management-plane role that allows managing storage accounts but not accessing the data within them. Storage Account Backup Contributor is for managing backup and restore operations for storage accounts, not direct data access. Storage Blob Delegator is used for creating user delegation keys, not for direct data access.