Which two roles should be assigned to Admin2 to meet the security requirements?

Admin2 needs to manage application groups, which includes publishing applications to users. The "Desktop Virtualization Application Group Contributor" role provides the necessary permissions to create, delete, and manage application groups, and to assign users to them. Additionally, to assign users to application groups, Admin2 requires the "User Access Administrator" role. This role allows Admin2 to manage user access to Azure resources, including assigning users to application groups. "Desktop Virtualization Host Pool Contributor" is incorrect because it manages host pools, not application groups or user assignments. "Desktop Virtualization Workspace Contributor" is incorrect as it manages workspaces, not application groups. "Desktop Virtualization Application Group Reader" is incorrect because it only grants read access, not the ability to manage or assign users.