Your customer is migrating their corporate applications to Google Cloud. The security team seeks comprehensive visibility of all organization resources. You have established yourself as the Organization Administrator using Resource Manager. Which Identity and Access Management (IAM) roles should you assign to the security team, in accordance with Google's recommended practices?