A. Create a Shared Access policy for Send permissions and another for Receive permissions.

B. Create separate Azure AD groups named Senders and Receivers. In Access Control (IAM) for the Relay namespace, assign Senders the Reader role and assign Receivers the Reader role.

C. Create dedicated Azure AD identities named Sender and Receiver. Assign Sender the Azure AD Identity Reader role. Assign Receiver the Azure AD Identity Reader role. Configure applications to use the respective identities.

D. Create a Shared Access policy for the namespace. Use a connection string in Web API and use a different connection string in consumer applications.