Adding and Removing Users from Entra Groups Affects their GCP Access

[mrtopsyt]

User story / feature request

As an engineer, I want to be confident that adding and removing users from Entra groups affects their GCP permissions.

Acceptance Criteria

• A user has been removed from DDS_Cloud_Admins and DOT_DDS_Data_Pipeline_and_Warehouse_Users, and added to DDS_Warehouse_Users_Flex using Entra
• That user can demonstrate that they reduced access to GCP (they cannot view buckets, service accounts, secrets, etc.)
• That user has been added back to their previous groups, and can demonstrate that their access is restored
• Documentation exists for how to edit Entra groups, how long it takes for access to be reflected in GCP, and whether there are other steps required