https://cloud.google.com/iam/docs/permissions-reference
Understanding roles
https://cloud.google.com/iam/docs/understanding-roles https://cloud.google.com/iam/docs/understanding-roles#predefined_roles
Choose predefined roles
https://cloud.google.com/iam/docs/choose-predefined-roles
Resource hierarchy
https://cloud.google.com/iam/docs/overview#resource-hierarchy
Each resource has exactly one parent