Duncan is a Security Engineer of Contoso Corporation. He is working on provisioning access controls of Synapse Analytics dedicated SQL pools. He requires providing access to the group “Contoso-SQL-group” using the Azure Role-Based access control (RBAC) policy to manage the databases. The principle of least privilege has to be maintained during the access provisioning process. 
What kind of RBAC policy can be set in this scenario?

Answer options:

A.SQL Server Contributor
B.SQL Security Manager
C.SQL Managed Instance Contributor
D.SQL DB Contributor

Correct Answer: D 

https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/synapse-analytics-security-baseline