Your organization wants to control IAM policies for different departments independently, but centrally. Which approach should you take?

A single Organization with Folders for each department is the correct approach because it allows for centralized management of all resources under one organizational node while providing clear separation and independent IAM policy control for each department through dedicated folders. Folders are designed for organizing resources and applying policies at an intermediate level within an organization. Multiple Organizations with multiple Folders is incorrect because managing multiple organizations introduces unnecessary complexity and overhead. Multiple Organizations, one for each department is incorrect for the same reason—it fragments management and makes centralized oversight difficult. A single Organization with multiple projects, each with a central owner is incorrect because projects are too granular for departmental separation and don't offer the same level of policy isolation as folders, making it harder to enforce department-specific policies consistently.