What should you do first?

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.

An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users.

What should you do first?
A . From contoso.com, modify the Organization relationships settings.
B . From contoso.com, create an OAuth 2.0 authorization endpoint.
C . Recreate AKS1.
D . From AKS1, create a namespace.

Answer: B

Explanation:

Reference: https://kubernetes.io/docs/reference/access-authn-authz/authentication/