Some environments may have an identity that is in both a google and M365 environment, their usage location set on the Microsoft identity, but can still generate escalation in the Google side.

Example a user that uses Google for their inbox, but logs in via Microsoft SSO.