API provider — googleapis.com:policytroubleshooter
curl \ -H "Authorization: Bearer $ACCESS_TOKEN" \ https://policytroubleshooter.googleapis.com/v1/iam:troubleshoot