Remediation

From Google Cloud Console

1. Go to IAM & Admin/IAM using https://console.cloud.google.com/iam-admin/iam.
2. For any member having both Service Account Admin and Service account User roles granted/assigned, click the Delete Bin icon to remove either role from the member. Removal of a role should be done based on the business requirements.