forseti service account permissions
Closed this issue · 1 comments
anners commented
When running : ./_helpers/forseti_admin_permissions.sh I get:
ERROR: Policy modification failed. For a binding with condition, run "gcloud alpha iam policies lint-condition" to identify issues in condition. ERROR: (gcloud.organizations.add-iam-policy-binding) INVALID_ARGUMENT: Role roles/serviceusage.serviceAccountAdmin is not supported for this resource.
The link in the shell script is no longer valid. <https://forsetisecurity.org/docs/v2.0/concepts/service-accounts.html#permissions
Which set of permissions from here https://forsetisecurity.org/docs/latest/concepts/service-accounts.html should we be setting?
anners commented
Thanks that fix works!