To restrict administrators to creating resources only in designated regions, you should use an Azure Policy. Azure Policy allows you to create, assign, and manage policies that enforce rules over your resources to ensure compliance. Specifically, you can configure Azure Policy to limit the regions available for resource creation. Other options like read-only locks, management groups, and reservations do not provide the functionality to restrict resource creation locations.