In a resource group named RG1, you aim to restrict the creation of virtual machines while allowing other resources to be created. Which Azure feature should you utilize to enforce this specific restriction?