Alice is an Azure subscription owner for the sales team at ABC inc, a home improvement chain that sells items across lighting, appliances, and thousands of other categories. Daily sales reports across these categories are stored in an Azure storage container for that day (2021-03-24, for example) so that the central finance team members can easily access the reports. Bob is the Sales Manager for the lighting category and needs to be able to read the sales reports for this category in any storage container, but not other categories. Describe how Alice can leverage authorization model(s) to restrict access based on storage account and container name ? Note that roles can be assigned at the storage level and specific tags to the categories.