Yes, we already looked into it. The closest example we found is this:
https://authzed.com/blog/google-cloud-iam-modeling. However, we need a solution that applies not just to a single service, but to multiple services, including organization, team, and project entities with a set of permissions... 🫨