We would like to get GKE Cost Analytics for a single project. if that's the case then the service account shouldn't require these permissions: - resourcemanager.organizations.get - resourcemanager.folders.get - resourcemanager.folders.list - resou...