AI-103 Practice Test 2

An order-management microservice needs to call a published prompt agent's endpoint in a Microsoft Foundry project. Security review requires that the service principal be able to do nothing else: it must not create, update or delete agents, must not read project or resource configuration, and must not be able to assign roles. The platform team wants a built-in role rather than a custom one, scoped as narrowly as the role supports.

Which role assignment meets the requirement?