You have an Azure subscription named Subcription1 that contains an Azure Active Directory (Azure AD) tenant named contosos.com and a resource group named RG1.
You create a custom role named Role1 for contoso.com.
You need to identify where you can use Role1 for permission delegation.
What should you identify?
A . contoso.com only
B . contoso.com and RGT only
C . contoso.com and Subscription1 only
D . contoso.com, RG1, and Subcription1
Answer: B