It is not even limited to destroy, you create a IA...
# google-cloud
g
It is not even limited to destroy, you create a IAMBinding for the same role on more than one place and they would replace each other on every change.