Your organization has defined a custom security attribute set named 'ProjectData' in Microsoft Entra ID to tag users with their assigned project codes. The security team owns the attribute definitions and does not want them changed. However, individual project managers must be able to assign existing 'ProjectData' attribute values to their team members' user accounts. You need to grant the project managers only the ability to assign these attribute values, following least privilege. Which role should you assign to the project managers?