How to manage Terraform destruction operations when the azur strategy requires NSG on all subnets?

We have a subscription policy that requires all subnets to have a network security group. Terraform works well when creating the subnet / NSG. However, it encounters a strategy error when terraform is destroyed because it first tries to remove the NSG from the subnet. This is blocked due to the imposing policy of network security groups on all subnets. Is there a way around this problem in terraform or possibly doing subnet deletion / nsg an atomic operation?

Terraform v0.11.13
+ provider.azurerm v1.25.0