An Azure subscription has the Owner role assigned to a security group. A new user is added to the group. When do they gain the Owner permissions?

1. A Within 24 hours
2. ✓ B Immediately (group membership changes propagate to RBAC in seconds) (correct answer)
3. C At next sign-in only
4. D After an admin approves

Shortcut: RBAC evaluates group membership at runtime. When a user is added to a group that has a role assignment, the permissions are effective immediately on the user's next token issuance (typically within minutes).