You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.

User1 - The Owner Role lets you manage everything, including access to resources.

User3 - The Network Contributor role lets you manage networks, including creating subnets.

User2 - The Security Admin role can view security policies, view security states, edit security policies, view alerts and recommendations, dismiss alerts and recommendations.