You are setting up communication restrictions for specific services within your Google Cloud organization. The data analytics team operates within a dedicated folder, and you need to control access to BigQuery for that folder and its projects. The data analytics team should have the ability to manage these restrictions solely at the folder level. What should you do?