You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You plan to enable Start VM on connect for Pool1.

You create a custom Azure role named Role1 that has sufficient permissions to start virtual machines on demand.

You need to ensure that the session hosts in Pool1 can start on demand.

To which service principal should you assign Role1?