Hi Andrew, sorry for the late reply on this one.
In the infrastructure team we are managing access to all our third party tools with terraform, Managing personnal access in github repo with pull requests. It's not a major requirement as we are using Google sso.