Your company's CISO has mandated that business data must be stored in specific geographic locations to meet regulatory requirements for global expansion. After analysis, you have confirmed the following:

• The in-scope services are covered by the Google Cloud Data Residency Terms.
• All business data must remain within designated locations under the same organization.
• The folder hierarchy can contain multiple distinct data residency locations.

You intend to use the Resource Location Restriction organization policy constraint. At which level of the resource hierarchy should you configure this constraint?