You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do? 

Answer options:

A. Grant the team members the IAM role of logging.configWriter on Cloud IAM.
B. Configure Access Context Manager to allow only these members to export logs.
C. Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
D. Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.

A

Reference: https://cloud.google.com/logging/docs/access-control