You created a custom Azure role (Role1) that can start VMs on demand. To enable Start VM on connect for Pool1 session hosts, to which service principal should you assign Role1?

To enable "Start VM on connect," the Azure Virtual Desktop service itself needs permissions to manage the power state of session host virtual machines. Assigning Role1, which grants VM start permissions, to the Azure Virtual Desktop service principal allows it to perform this action. Managed1 is a managed identity, which could be used for other services but isn't the direct service principal for AVD's core functions. Azure Automation is for running automated tasks, not directly for AVD's "Start VM on connect" feature. Host1 is a specific session host VM, not a service principal. Azure Compute is a broad service, but the specific permissions need to be granted to the Azure Virtual Desktop service for this feature.