Your organization has a dedicated person who creates and manages all service accounts for Google...

[Reference:https://cloud.google.com/iam/docs/creating-managing-service-accounts, , Service Account User (roles/iam.serviceAccountUser): Includes permissions to list service accounts, get details about a service account, and impersonate a service account. Service Account Admin (roles/iam.serviceAccountAdmin): Includes permissions to list service accounts and get details about a service account. Also includes permissions to create, update, and delete service accounts, and to view or change the IAM policy on a service account., , , ]