You plan to deploy an App Service web app App1 via Web Deploy. Developers should be able to deploy using their Azure AD credentials while following least privilege. What should you do?

Assigning the Website Contributor role to developers allows them to deploy code to App Services while adhering to the principle of least privilege. This role grants permissions specifically for managing web content, including deployment, without providing broader administrative access that roles like Owner would confer. Owner provides full access to manage all resources, which violates least privilege. Configuring app-level or user-level credentials for FTPS is an alternative deployment method, but it doesn't leverage Azure AD for authentication and authorization, nor does it inherently enforce least privilege as effectively as an RBAC role.