You need to grant user permissions to manage virtual networks in a resource group. The solution must use the principle of least privilege. How will you achieve the goal?