I’m new to IAM roles and conditionals, and I’m lost here.

I would like to give certain accounts the role folderAdmin in a special folder, so they can create and delete subfolders. But I would like to prevent them from deleting the special folder.

Like this

organisation
   special_folder << accounts get folderAdmin role here
      test_folder1  << account may create and delete folders below special_folder

# accounts should not be able to delete "special_folder" itself

I thought this could be done with conditionals, something like this in pseudo code:

at folder "special_folder"
account XY has role folderAdmin
condition: not if (operation is "delete" and target is "special_folder")

I’ve read the documentation, but I do not understand how “operation” and “target” can be accessed in conditions, and I’m also getting the feeling that conditions and resourcemanager folder operations do not pair well. Is this even possible, if so how?