As the Organization Admin for your company, an engineer under your purview needs to configure multiple host projects across various folders and share subnets with service projects. To enable the engineer's IAM setup with minimal steps, what action should you take?