Your team is deploying an Azure AI Foundry project to production. A data science group needs to create and test new model deployments and edit agents within the project, but they must not be able to modify the underlying Azure resource, change networking configuration, or assign roles to other users. Following least-privilege principles, which approach should you use to grant their access?