Which principle should guide the scope chosen for a role assignment?

1. A Always assign at subscription scope for simplicity
2. ✓ B Assign at the narrowest scope that satisfies the requirement (correct answer)
3. C Always assign at management group scope
4. D Scope does not matter

Shortcut: Least privilege means scoping to the specific resource or resource group needed. Broad assignments increase blast radius if the identity is compromised.