That resource, which I assume had been renamed from a crude Terraform script that renamed google_project_iam; updates the projects entire binding; removing all the internal service agents and it becomes FUBAR