A senior developer in your company is assigned to manage and create service accounts for your company's Google Cloud projects. You have to make sure that the assigned personnel is granted the least permissions to manage the projects. What should you do?