Create a custom IAM role with the organization policy administrator permission and grant the permission to each team’s folder. Limit policy modifications based on folder names within the custom role’s definition.

Assign the organization policy administrator role to a central service account and provide teams with the credentials to use the service account when needed.

Grant each team the organization policy administrator role at the organization level.