Determine if “Disable Automatic IAM Grants for Default Service Accounts” policy is enforced at the organization level.
By default, service accounts get the editor role when created. To improve access security, disable the automatic IAM role grant.
Ensure that “Disable Automatic IAM Grants for Default Service Accounts” constraint is enforced at the organization level.