services / Google Cloud / Cloud Billing Resource Associations

A "resource association" associates a project with the billing account used for it.

billing.​resourceAssociations ​copy.​delete

Can render the project without a billing method, interrupting service.

Risks

1. Denial-of-service (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links