IAM bindings reference

Legend: + additive, • conditional.

Project dev-sec-core-0

members	roles
dev-resman-pf-0 serviceAccount	roles/cloudkms.admin `+•` roles/cloudkms.viewer

members	roles
prod-resman-pf-0 serviceAccount	roles/cloudkms.admin `+•` roles/cloudkms.viewer