Spinnaker RBAC with G-suite google groups doesn't deploy fiat

Question

I am trying to setup Spinnaker which is accessed via IAP (external protected access - instead of kubectl tunnel) together with RBAC authorisation describe in this RBAC autho