Which practice should be preferred when granting access to a team rather than individuals?

1. A Assign roles to each user directly
2. ✓ B Assign roles to an Entra ID group and manage membership (correct answer)
3. C Share one account
4. D Use a service principal for humans

Shortcut: Group-based assignment means joiners and leavers are handled by membership changes alone, reducing assignment sprawl and the risk of orphaned permissions.