Your company has an Azure subscription named Sub1. You need to assign a role to an administrator to successfully onboard Sub 1 to Microsoft Entra Permissions Management. The solution must use the principle of least privilege. What Azure role should you assign?