You have an Azure subscription that contains a user named User$1$ and a Microsoft Sentinel workspace named Workspace$1.$

You need to ensure that User$1$ can investigate incidents in Workspace$1.$ The solution must follow the principle of least privilege.

Which role should you assign to user$1?$

Select only one answer.

Directory Reader

Reports Reader

Security Operator

Security Reader