You need to create a custom role in Microsoft Entra to allow a user to manage basic aspects and credentials of application registrations. This role should only be applicable to a specific app registration rather than at the directory-wide scope. Which of the following steps is necessary to ensure that the custom role is properly scoped and assigned?