You are using GCDS to sync accounts from an on-premises LDAP to Google Workspace. During an audit, you discover that some accounts from the "Contractors" OU in LDAP have not been provisioned in Google Workspace. You must ensure these accounts are synced while also making sure they are placed in a Google Workspace OU called "External/Contractors". What should you do?