PermissionsThe Enforce GCP IAM User-Managed Service Accounts Do Not Have Admin Privileges policy pack requires 1 permission:iam.serviceAccounts.delete