What should you do?

You create and publish the BP1 blueprint.

You need to ensure that you can use BP1 to configure permissions for RG1. The solution must meet the authentication and authorization requirements.

What should you do?
A . Add a read-only resource lock to Sub1.
B . Assign an Azure role-based access control (Azure RBAC) role to Sub1.
C . Assign an Azure role-based access control (Azure RBAC) role to BP1.
D . Select the Read Only blueprint lock mode for the BP1 assignment.

Answer: C

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/governance/blueprints/overview