I have created a GCP service account with org viewer permissions (I assume therefore having read rights in all projects)
▶ gcloud organizations get-iam-policy 83838383838383 --flatten="bindings[].members" --format='table(bindings.role)' --filter="bindings.members:[email protected]"
ROLE
roles/resourcemanager.organizationViewer
I then activate this locally
▶ gcloud auth activate-service-account [email protected] --key-file=keyfile.json
Activated service account credentials for: [[email protected]]
and then try to perform a compute disk list
(on the same project the SA was created)
▶ gcloud compute disks list
ERROR: (gcloud.compute.disks.list) Some requests did not succeed:
- Required 'compute.disks.list' permission for 'projects/my-project-id'
Why is that?