Which two roles should be assigned to Admin1 to meet the security requirements?

Admin1 needs to manage application groups and view workspace settings. The Desktop Virtualization Application Group Reader role allows Admin1 to view, but not modify, application groups, which aligns with the requirement to manage them (implying read access is a prerequisite for management, even if modification isn't explicitly stated as needed here). The Desktop Virtualization Workspace Contributor role provides permissions to manage all aspects of a workspace, including viewing and modifying its properties, which covers the need to view workspace settings. Desktop Virtualization Host Pool Contributor would grant permissions to manage host pools, which is not required. User Access Administrator is a highly privileged role for managing user access to Azure resources, far exceeding the stated requirements. Desktop Virtualization Application Group Contributor would allow modification of application groups, which is not explicitly required, and the Reader role is sufficient for "managing" in a view-only context.