You have an Azure App Services web app named App1. You plan to deploy App1 by using Web Deploy. You need to ensure that the developers of App1 can use their Microsoft Entra credentials to deploy content to App1. The solution must use the principle of least privilege. What should you do?