Your organization has a production resource group named RG-Prod that contains critical virtual machines and databases. Multiple administrators have Contributor access to the subscription. You need to ensure that no one can accidentally delete RG-Prod or any resources within it, while still allowing administrators to modify resource configurations and add new resources. What should you implement?