Allow seperate SA for gitlab object storage
So your deploy user may be a full admin, but the object storage service account can be locked down to just object storage.
This was also useful for local deploy where I was using application default credentials for the deploy, but still needed a service account for object storage support in GitLab.