You have an Azure subscription that contains a user named demousr1. You need to ensure that demousr1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege. Which Role-Based Access Control (RBAC) role should you assign to
demousr1?