Your organization is deploying dozens of new spoke VNets across multiple subscriptions using Azure Virtual Network Manager. To prevent address space overlaps that would block future peering, the network team wants a centralized way to automatically allocate non-overlapping CIDR ranges to each new VNet from a governed set of address blocks. Which Azure Virtual Network Manager capability should you use?