The correct answer is D because the Cloud SDK's gcloud iam roles copy command is specifically designed to copy roles to a different organization or project efficiently. This method is documented in the GCP documentation under 'Cloud SDK IAM Copy Role', which outlines how to create a role from an existing one by specifying the destination organization (--dest-organization=DEST_ORGANIZATION) or project (--dest-project=DEST_PROJECT).