A new Google Cloud customer has requested your assistance in setting up their billing configuration. They have specified the need to categorize resources in a way that those with common IAM policies are grouped together. How would you accomplish this?