Which role should you assign to the user?

You have a Microsoft Azure Active Directory (Azure AD) tenant.
The organization needs to sign up for Microsoft Store for Business. The solution must use the principle of least privilege.
Which role should you assign to the user?
A. Global administrator
B. Cloud application administrator
C. Application administrator
D. Service administrator