In a large enterprise environment, a network administrator is tasked with implementing Role-Based Access Control (RBAC) to enhance security and streamline user permissions. The organization has three distinct roles: Administrator, User, and Guest. Each role has specific permissions associated with it. The Administrator role can create, read, update, and delete resources, while the User role can only read and update resources. The Guest role is limited to read-only access. If a new policy is introduced that requires all Users to have the ability to create resources but not delete them, what changes must be made to the RBAC configuration to comply with this policy while ensuring that the principle of least privilege is maintained?