Preliminary Permissions for New GCP Groups on Staging

[mrtopsyt]

User story / feature request

As an engineer working on GCP permissions, I want to set preliminary permissions for the new DDS_Payments_Admins and DDS_Warehouse_Users_Flex groups using existing roles, as follows:

• DDS_Payments_Admin
  • BigQuery Metadata Viewer
  • BigQuery User
  • Secret Manager Secret Accessor
  • Secret Manager Viewer
  • Storage Object User
  • Viewer
  • Service Account Admin
• DDS_Warehouse_Users_Flex
  • BigQuery Metadata Viewer
  • BigQuery User

Acceptance Criteria

• Permissions are added in Terraform to grant the access specified above

Notes

These permissions are for testing only, and are not expected to satisfy acceptance criteria in #5691