A company is deploying a new set of Azure resources and wants to ensure that its network engineers have the necessary permissions to only manage virtual networks, network security groups, and public IP addresses within a specific subscription. Which of the following should be assigned to the network engineers to meet this requirement?
Network Contributor
Reader
Contributor
Owner