As an associate cloud engineer working on Google Cloud Platform, one of your tasks is to ensure that best practices are being followed within your organization. Which of the following actions aligns with Google Cloud's best practices for identity and access management?