You're building an ASP.Net Core app to interact with Azure Blob containers using Entra ID and role-based access. What permission should you set for the Azure Storage API?
User.Read
User.Write
client_id
user_impersonation
Blob.Read
Storage.Access
AzureAD.Auth
Storage Blob Data Contributor
Storage Blob Data Reader
Storage Account Contributor
user_impersonation allows the application to act as the user, inheriting their roles and permissions for blob access.