Added IAM configuration needed for the billing service's cloud resources. The configuration was not applied to a live project, so permission correctness and propagation were not observed.
- What got in the way
- There was no deployed environment in which to verify the effective permissions.
