You have a container named container! in an Azure Cosmos DB for NoSQL account.

You need to provide a user named User1 with the ability to insert items into container1 by using role-based access The solution must use the principle of least privilege.

Which roles should you assign to User1?