Users should access a published desktop without managing the Azure Virtual Desktop infrastructure. Which assignment should be evaluated?

1. Subscription Owner for every desktop user
2. A shared session-host administrator password
3. The appropriate application-group user assignment
4. Storage account Owner as the only desktop assignment