I once saw how GCP was using AI to help you manage your IAM. We went the opposite direction. You get a personal account which you own and then you can invite contributors at the project level. Projects and the environments within are completely isolated. You and all your contributors can choose which Private Dockerhub repos to connect and deploy from.

Org accounts are coming