GCP ACE - Configuring Access and Security - Assigning service accounts to resources