Your continuous integration and delivery (CI/CD) server can't execute Google Cloud actions in a specific project because of permission issues. You need to validate whether the used service account…

The most direct and effective way to validate if a service account has the appropriate roles for a specific project is to navigate to the Identity and Access Management (IAM) section in the Google Cloud console and examine the roles granted to that service account.

Organization policies define constraints across resources but do not directly show the specific roles assigned to a service account within a project, which is necessary to validate its permissions.

While understanding resource access is important, this option is vague and not the primary method to check assigned roles for a service account; checking IAM roles directly is more efficient.

Reviewing audit logs for 'permission denied' errors will confirm that there are permission issues, but it does not directly show the roles assigned to the service account, which is what needs to be validated.