A compliance officer at Contoso needs to ensure that members of a sensitive project group are periodically re-evaluated so that people who no longer need access are removed. The officer wants group owners to attest to each member's continued need for access on a recurring basis. Which Microsoft Entra capability should be used?