Description
Administrative permissions ({PolicyBindings.Role}) have been granted to the user {GcpUser} at the project level; these rights allow the User or service account to create a project. Once a user creates a project, they're automatically granted the owner role for that project.