Configure an organization policy to restrict identities by domain

Configure an organization policy to block creation of service accounts

Configure Cloud Scheduler o trigger a Cloud Function every hour that removes all users that don ' t belong to the Cloud identity domain from all projects.

Create a technical user (e g . crawler@yourdomain com), and give it the protect owner rote at root organization level Write a bash script that

• Lists all me IAM rules of all projects within the organization

• Deletes all users that do not belong to the company domain

Create a Compute Engine instance m a project within the Organization and configure gcloud to be executed with technical user credentials Configure a cron j