In Azure, how to prevent a user create a Network Interface Card but not modify it?
It is not possible for someone to have permissions to create a resource but not edit it, as it is all contained under the write permission.
Your best bet would be to use Azure Policy to define a policy that doesn't allow static IP addresses.