You are implementing an Azure function which should create new storage accounts. You need to grant the function the minimum required privileges to create the storage accounts. The solution must minimize administrative effort. What will you do?