Explanation: User 1: User Administrator Create, update, or delete access review of a group or of an app User Administrator. User 2: Security Reader Read access review of an Azure AD role Security Reader. https://learn.microsoft.com/en-us/azure/active-directory/governance/deploy-access- reviews#what-resource-types-can-be-reviewed