You are establishing the IAM policies for a new GCP Organization. Which TWO practices align with Google Cloud IAM best practices? (Select TWO)

Assign IAM roles directly to individual user accounts.

Assign IAM roles to Google Groups, and add users to those groups.

Use the roles/editor basic role for all developers to ensure they have enough permissions.

Use Service Accounts for application-to-application authentication.

Download Service Account JSON keys and store them in your source code repository for easy access.