Google Cloud IAM configurations that deserve regular attention.