An organization owner wants a senior developer to be able to add and remove members from a specific team, edit that team's description, and manage the team's repository access—without granting them full organization-wide administrative control. Which approach follows the principle of least privilege?