You have set up an Azure Sentinel workspace, and now need to assign RBAC roles to colleague who should be able to manage incidents. The solution must use the principle of least privilege. Which role should you assign?

Answer options:

A.Azure Sentinel Reader
B.Azure Sentinel Responder
C.Azure Sentinel Contributor
D.Logic App Contributor

Correct Answer: B 
As shown in the table, Azure Sentinel Responder is the least privileged role with enough permissions to manage incidents: 

Option A is incorrect. This role does not have permission to manage incidents (see table).
Option C is incorrect. This user does have permission, but it is not the least privileged (see table).
Option D is incorrect. This user does have permission, but it is not the least privileged (see table).
Reference:
To know more about Azure sentinel roles and permissions, please refer to the link below: 

https://docs.microsoft.com/en-us/azure/sentinel/roles#roles-and-allowed-actions