In a highly regulated industry where separation of concerns (SoC) and the principle of least privilege (PoLP) are essential, how should you assign Cloud Spanner roles to the following team members:
Person A (database administrator)
Person B (analyst generating metric reports)
Application C (responsible for automatic backups)?