Your team needs to deploy several Azure Resource Manager templates. These templates will reference secrets stored in the Azure Key vault service. You have to recommend the right solution for accessing the secrets in the key vault during the deployment of the Azure Resource Manager templates. You have to ensure the solution uses the principle of least privilege. Which of the following would you use to restrict access to delete the key vault?