In the scenario of deploying an Azure App Services web app named App1 using Web Deploy, how should you enable developers to deploy content using their Azure AD credentials while adhering to the principle of least privilege?