Your company plans to use Google Cloud for a centralized logging and monitoring system. The compliance team needs access to view logs in Cloud Logging for auditing purposes but must not modify or delete logs. How should you assign permissions with minimal administrative overhead?