your customer is moving their corporate applications to cloud. the security team wants detailed visibility of all resources in the organization. you use resource manager to set yourself up as the org admin. what cloud identity and access management (cloud iam) roles should you give to the security team?