Grant Service Account and Organization Roles

The service account is created under a project of a organization in the Google Cloud account. FortiCWP requires the service account to be granted with the following roles in the scope of organization level to provide security monitoring across all projects under the organization:

1. Organization Administrator or Organization Viewer
2. Owner or Viewer

Steps to Grant Service Account and Organization Roles

1. In Google Cloud Portal, first select the organization which the project is under.



2. Click the Navigation Menu, select IAM & admin > IAM.
3. Click the ADD button on the top.



4. In the New Principals field, enter the service account ID created earlier.
5. In the Role field, select Project > Owner or Viewer.
6. Then click + ADD ANOTHER ROLE, select Resource Manager > Organization Administrator or Organization Viewer.



7. Click the SAVE button to finish.