In an Azure AD DS managed domain (contoso.com) you created Pool1. Admin1 has the Virtual Machine Contributor role at the subscription level. To let Admin1 add session hosts to Pool1 using least privilege, which two actions are required?

To add session hosts to an Azure Virtual Desktop host pool, Admin1 needs specific permissions and a way to register the hosts. The Desktop Virtualization Session Host Operator role provides the necessary permissions to perform operations on session hosts within a host pool, including adding new ones. Generating a registration token is crucial because it allows the new session hosts to securely join the host pool. The Desktop Virtualization Host Pool Contributor role is too broad; it allows managing the host pool itself, not just adding session hosts. Adding Admin1 to the AAD DC Administrators group is for managing the Azure AD DS domain, not for AVD host pool operations. A Microsoft 365 Enterprise E3 license is for user access to AVD, not for administrative tasks like adding hosts.