In an Azure subscription with a Recovery Services vault named Vault1, to initiate the process of enabling multi-user authorization (MAU), which resource must be created initially?