Description

Primitive roles are roles that existed prior to the introduction of IAM in GCP. These roles are very powerful, and include a large number of permissions across all Google Cloud services. The Service Account {GcpIamServiceAccount} was found with the primitive administrative role ""{GcpIamServiceAccount.PolicyBindings.Role}"", this role allow the user broad administrative permissions on the {GcpIamServiceAccount.PolicyBindings.Policy.Scope} level.

• 

  Recommended Mitigation

  Primitive roles should not be used to give users access to resources. Make sure to follow the principle of least privilege. Read more here: <a href="https://cloud.google.com/blog/products/identity-security/dont-get-pwned-practicing-the-principle-of-least-privilege." target="_blank" rel="noopener noreferrer">https://cloud.google.com/blog/products/identity-security/dont-get-pwned-practicing-the-principle-of-least-privilege.</a>