You plan to publish several applications in an Azure AD tenant. Which two user roles can be assigned to a user so they can grant admin consent for those published applications?

The Cloud Application Administrator and Application Administrator roles both have permissions to grant admin consent for applications. The Cloud Application Administrator role manages all aspects of applications, application proxies, and application service principals, including granting admin consent. The Application Administrator role has similar permissions but is slightly less privileged, still allowing them to grant admin consent. The Security Administrator role focuses on security features and settings, not application management. The User Administrator manages user accounts and groups, not applications. The Application Developer role can register applications but cannot grant admin consent.