You have an Azure subscription that contains an Azure OpenAI resource named AI1 and a user named User1. You need to ensure that User1 can add custom data sources to AI1. The solution must follow the principle of least privilege. Which role should you assign to User1?