A build pipeline needs to push images to ACR using a service principal. Which permission should the service principal have?
- A Owner
- B Contributor
- C AcrPush (correct answer)
- D AcrPull
Shortcut: AcrPush grants push access (read + write tags/manifests) without broader Azure resource management rights. Always use least-privilege role assignments.