Recently it came to our attention that the roles/iam.securityViewer role that we tell customers to provision for their environment did not have the required permission to make one of the integration's API calls to /v1/projects/{projectId}. We should have a good method to test all of the integration's endpoints with the explicitly defined permissions that we list for users in docs/development.md.
Recently it came to our attention that the
roles/iam.securityViewer
role that we tell customers to provision for their environment did not have the required permission to make one of the integration's API calls to/v1/projects/{projectId}
. We should have a good method to test all of the integration's endpoints with the explicitly defined permissions that we list for users indocs/development.md
.See JupiterOne/graph-google-cloud#46