You are deploying a containerized application to Azure Container Instances from an Azure container registry that has a private endpoint enabled. Your automation pipeline currently authenticates to the registry using a Microsoft Entra service principal ID and password. The deployment fails to pull the image. What must you do to enable the image pull?