Let’s suppose we have a number of GCP projects and several dev teams. What is the recommended way of managing access to the resources in the projects for the different teams?

We are considering creating 2 groups per team: one for standard access and another for more powerful members. Is this a good strategy?

If a specific user needs access to a particular resource, is it better to give them only that access or to grant it to their group? Which way is better?

Should we only grant access to groups, or is it okay to grant access to individual users?