(AZ-900:Q-455) Azure 资源组只读锁

You have an Azure subscription that contains a resource group named RG1.

Users must NOT be able to perform the following operations:

• Delete RG1.
• Modify resources in RG1.
• Delete resources from RG1.

What should you do?