Ensures that user managed service accounts do not have any admin, owner, or write privileges.
Service accounts are primarily used for API access to Google. It is recommended to not use admin access for service accounts.
Ensure that no service accounts have admin, owner, or write privileges.