You have an Azure subscription that contains a user named User1 and a storage account that hosts a blob container named blob1. You need to grant User1 access to blob1. The solution must ensure that…

A shared access signature (SAS) provides delegated access to resources in your storage account with granular control over what resources the client can access, what permissions they have, and for how long the access is valid, including setting an expiration time like six days.

Role-based access control (RBAC) grants persistent access based on roles and does not inherently support time-limited access that automatically expires after a set duration.

A shared access policy defines permissions and an expiration time for a SAS, but it is a container for SAS permissions and not the mechanism for granting access itself; the SAS is what the user directly uses for access.

A managed identity is used for Azure services to authenticate to other Azure services without managing credentials, not for granting direct user access with expiration.