You are designing an agentic solution using Azure AI Agent Service. The agent needs to perform actions on behalf of users, such as sending emails and updating databases. The solution must use managed identities for authentication to Azure resources. Which TWO configurations are required?