This is very similar to how DoIT manage their client projects. I needed to add one of their service accounts to my organization's IAM policy so they could have complete visibility over all resources for monitoring / cost reporting purposes. The only potential difference being that DoIT is a Google Cloud Premier Partner™