Your company applies an Azure Policy assignment at the subscription scope that denies the creation of any storage account that does not use geo-redundant storage (GRS). The development team needs to create locally redundant storage (LRS) accounts in a single resource group named rg-dev-sandbox for testing, without disabling the policy for the rest of the subscription. What should you configure?