Preliminary Incident Statement
The root cause was an issue in our automated quota management system which reduced capacity for Google's central identity management system, causing it to return errors globally..... so much for limiting Blast Radius