You need to enable users to modify data in the database tables using UPDATE operations. You need to implement a solution that meets the design requirements. What should you configure?

Server roles grant broad permissions at the server level, which is excessive and inappropriate for granting granular table modification access to end-users.

While database roles can grant UPDATE permissions, this typically provides direct table modification access to all members of the role, which might not align with design requirements for controlled, indirect data manipulation through specific application logic.

User-Defined Functions (UDFs) are primarily for computations and returning values, and generally cannot perform data modification operations like UPDATE, even when combined with the EXECUTE AS statement.

Stored procedures are designed to encapsulate SQL statements, including UPDATE operations, and the EXECUTE AS statement allows the procedure to run under a specific security context. This enables users with limited direct permissions to execute the stored procedure, which then performs the UPDATE using the elevated permissions of the user specified in the EXECUTE AS clause, upholding the principle of least privilege.