You have a Microsoft $365$ E$5$ subscription.

You create a user named User$1.$

You need to ensure that User$1$ can only create data loss prevention $($DLP$)$ policies. The solution must follow the principle of least privilege.

Which type of role can you assign to User$1?$