With Google Groups, if someone leaves the organization or team there's no centralized way to remove their access to the cloud resources immediately. GCP users who are also G Suite users can be managed centrally through the Google Admin Console. Alternatively, Cloud Identity can be used for non-G Suite users
Data Communication and Computer Networks MCQ - Cloud Computing
Service accounts allow for the authorization of service-to-service interaction.
Primitive roles, such as Owner, Editor, and Viewer, apply to projects and services.
GCP users as inherited permission model. The user will always get the least restrictive permission when inherited.

