In order to follow the least privilege principle I would recommend you to use the Website Contributor .

https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/web-and-mobile#website-contributor