GCP Associate Cloud Engineer Practice Test 1

Your organization has a folder named retail that contains 12 projects, and new projects are added to that folder every month. A group of support engineers, gcp-support@example.com, needs read-only visibility of Compute Engine resources in all of those projects, including projects created in the future, but must not gain visibility into projects in any other folder.

Which action grants exactly that access with the least ongoing administration?