You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?

The `logging.configWriter` IAM role (or Logs Configuration Writer role) provides permissions to manage log sinks, which are the mechanisms used in Cloud Logging to export logs to other destinations like Cloud Storage, BigQuery, or Pub/Sub. Granting this role allows team members to create and configure these export sinks.

Access Context Manager controls access *based on context* (e.g., IP address, device compliance), not for granting specific resource management permissions like creating log sinks.

`logging.sinks.list` and `logging.sink.get` only allow listing and viewing log sinks; they do not grant permission to *create* or *manage* log sinks, which is necessary for exporting logs.

Organizational Policies define constraints across an organization (e.g., restricting resource locations) and are not used to grant specific IAM permissions to individual users or groups for resource management.