Your organization manages critical production databases in Azure. Last month, a junior administrator accidentally deleted a resource group containing several SQL databases, causing a 4-hour outage. Management wants to implement a solution that prevents any user, regardless of their permissions, from deleting these critical resource groups while still allowing authorized administrators to modify resources within them. What should you implement?