What is the scope hierarchy in Azure RBAC, from broadest to narrowest?

1. A Resource → Resource Group → Subscription → Management Group
2. ✓ B Management Group → Subscription → Resource Group → Resource (correct answer)
3. C Subscription → Management Group → Resource Group → Resource
4. D Resource Group → Subscription → Resource → Management Group

Shortcut: RBAC assignments propagate down the hierarchy. A role assigned at Management Group scope applies to all subscriptions, resource groups, and resources beneath it.