Microsoft Certified: Azure Administrator Associate

You need to assign an Azure RBAC role to an Azure Virtual Desktop service principal scoped to an Azure subscription. Which built-in Azure role provides the minimum permission required to create the role assignment on that subscription?

When assigning a role using the Azure portal, an administrator searches for the Azure Virtual Desktop enterprise application and finds two entries with the same name. According to guidance, how should the administrator ensure the role is assigned to the correct service principal?