PermissionsThe Enforce Trusted Domains to Access GCP IAM Project Policy policy pack requires 1 permission:resourcemanager.projects.setIamPolicy