It is also very strange that there is no way to grant roles in here https://github.com/pulumi/pulumi-gcp/tree/master/sdk/python/pulumi_gcp/sql, so maybe GCP's API doesn't support it

when I last looked into this I decided that gcp doesn’t support creating or setting roles for new users (instead they are always created with an admin-like role) and you always need to set the permissions inside the database instance after creating the user 😕