Restrict our G-Suite email / service account of our project so that the user cannot add them to his personal GCP project

Question

We basically have a use case where user should not be able to take data out of our GCP project. So, we want that the user should not be able to add his GCP credentials provi