Your company’s security team needs to have read-only access to Data Access audit logs in the _Required bucket. You want to provide your security team with the necessary permissions following the principle of least privilege and Google-recommended practices. What should you do?

A. Assign the roles/logging.viewer role to each member of the security team. B. Assign the roles/logging.viewer role to a group with all the security team members. C. Assign the roles/logging.privateLogViewer role to each member of the security team. D. Assign the roles/logging.privateLogViewer role to a group with all the security team members.