The marketing team in your organization wishes to use a third-party productivity tool available in the Google Workspace Marketplace. This tool enhances their workflow by integrating with Google Sheets. However, for security reasons, you need to ensure only the marketing OU has access to this tool. How would you achieve this?