You have a Microsoft 365 E5 tenant that contains a user named User1.

You plan to implement insider risk management.

You need to ensure that User1 can perform the following tasks:

Review alerts.

Manage cases.

Create notice templates.

Review user emails by using Content explorer.

The solution must use the principle of least privilege.

To which role group should you add User1?