You need to grant your help desk the minimum permissions to: view and manage user sessions (send message, log off, disconnect) in a specific host pool and restart affected session host VMs when needed. They must not create or modify Azure resources. Which two role assignments should you configure? (Each correct answer presents part of the solution. Choose two answers.)

The Desktop Virtualization Session Host Operator role on the host pool grants permissions to view and manage user sessions, including sending messages, logging off, and disconnecting users, without allowing resource creation or modification. The Virtual Machine Operator role on the resource group containing the session host VMs allows the help desk to restart the VMs, which is necessary for troubleshooting, while still adhering to the principle of least privilege by not granting broader VM management capabilities. Desktop Virtualization Contributor would allow creating and modifying resources, exceeding the requirement. Contributor on the subscription is too broad and grants excessive permissions. Virtual Machine Contributor would allow managing VMs, including creating and deleting, which is more than just restarting and violates the principle of least privilege.