PermissionsThe Enforce GCP Compute Engine Disks Are Attached to Instances policy pack requires 1 permission:compute.disks.delete