Your company manages multiple Google Cloud projects within its organization. As part of enhancing the monitoring strategy, these projects are to be integrated into designated workspaces. Your team is responsible for setting up these workspaces. Adhering to the principle of least privilege, which IAM role should your team be granted to successfully create these workspaces?