Found an error here
gcloud projects add-iam-policy-binding $DEVSHELL_PROJECT_ID --member serviceAccount:$S_A@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com --role projects/$DEVSHELL_PROJECT_ID/roles/$CUSTOM_ROLE
fixed it with this
gcloud projects add-iam-policy-binding $DEVSHELL_PROJECT_ID --member serviceAccount:orca-private-cluster-413-sa@$DEVSHELL_PROJECT_ID.iam.gserviceaccount.com --role projects/qwiklabs-gcp-00-cfb56687157d/roles/orca_storage_editor_140