Pull Request Reviews for Cloud Posse Projects
Without a condition, the delegated administrator can call DisablePolicyType for any policy type, including SERVICE_CONTROL_POLICY
DisablePolicyType
SERVICE_CONTROL_POLICY