In an Azure subscription with a storage account named storage1, which services within storage1 support the use of conditions in role assignments for role-based access control (RBAC)?