security-engineer video for in a setup where a Shared VPC Network is established, with project "co-vpc-prod" serving as the host project, the team has
In a setup where a Shared VPC Network is established, with project "co-vpc-prod" serving as the host project, the team has configured firewall rules, subnets, and a VPN gateway within the host project. The goal is to allow Engineering Group A to attach a Compute Engine instance exclusively to the 10.1.1.0/24 subnet. What permission should be granted to Engineering Group A to fulfill this requirement?