Oracle's Oracle AI Database@Azure prerequisites explicitly identify the personas required for optional identity federation. On the Azure side, the required persona is an Entra ID Administrator with appropriate Microsoft Entra administrative permissions. On the OCI side, the corresponding persona is an Identity Domain Administrator .

This combination is necessary because federation spans both identity systems. Microsoft Entra ID must be configured with the OCI enterprise application, SAML authentication details, groups/users, and provisioning configuration. OCI IAM Identity Domains must then trust the Entra identity provider, establish the corresponding IdP configuration and policies, and support any required user provisioning.

Oracle's prerequisite matrix specifically lists Azure permissions including External Identity Provider Administrator, Groups Administrator, and User Administrator capabilities, with OCI Identity Domain Administrator permission on the Oracle side.

Billing Account Owner, Subscription Owner, Support Owner, and Security Zone Administrator roles serve different administrative purposes and do not jointly provide the identity-domain configuration authority required for federation.

Therefore, B exactly matches Oracle's documented administrative personas.

Study Guide reference: Secure Oracle AI Database@Azure — identity federation, Microsoft Entra ID, OCI IAM Identity Domains, SSO and RBAC.

===============