* Skip IAM grants for service agents that are not created on API activation * Fix tests
The note is not visible to the blocked user.