You are a data practitioner working for a healthcare organization that stores sensitive patient data in Cloud Storage. To comply with regulatory requirements, you need to restrict access to this data and monitor any changes to permissions. Which access configuration is the most appropriate to ensure restricted access and governance?