As a cloud engineer in a large airline company, your responsibility includes managing GCP-hosted operational and flight schedule data. The operations team requires administrative access to Compute Engine instances for maintenance. The security team mandates optimal credential distribution and access auditing. What is the best approach?