Which role grants a user only the permissions required to upload images to an Azure Container Registry?

The AcrPush role is the correct choice because it provides specific permissions to push (upload) images to an Azure Container Registry. This adheres to the principle of least privilege, granting only the necessary access. The Owner role grants full access to manage all resources, including deleting the registry, which is excessive for just uploading images. The Contributor role also provides broad permissions to manage resources but cannot grant access to others, still exceeding the requirement. The AcrPull role, conversely, only allows users to pull (download) images from the registry, not upload them.