You are responsible for ensuring that only specific teams within your organization can access certain resources in a GCP project. What is the most effective way to manage this while adhering to the principle of least privilege?

*Explanation:* Use Custom roles with conditions. Assigning Primitive roles at the Project level or using Predefined roles may not align with the principle of least privilege, as they can grant overly broad permissions. Instead, using Custom roles with conditions allows you to tailor permissions precisely to the specific needs of each team and resource, ensuring that access is granted only when necessary and under defined conditions. This approach provides a more granular and secure access control mechanism while maintaining compliance with the principle of least privilege.