In your organization, company-approved compute images are stored in a single Google Cloud project, acting as an image repository, protected by VPC Service Controls within a perimeter alongside other projects. This setup allows other projects within the organization to deploy images from the repository. However, a team now needs to deploy a third-party disk image stored in an external Google Cloud organization. What action should you take to grant read access to the disk image for deployment within the perimeter?