Your organization is integrating a third-party HR platform that automates the onboarding process. This platform requires access to provision new users in your Google Workspace. As an administrator, how would you securely facilitate this requirement without granting unnecessary privileges?