Merge pull request #363 from GoogleCloudPlatform/gh362-bootstrap-prereq

#362 - bootstrap prereq

0-bootstrap/README.md

@@ -83,7 +83,19 @@ Set the variables in **terraform.tfvars** (`groups` block) to use the specific g
    - The `roles/resourcemanager.projectCreator` role on the Google Cloud organization.
    - The `roles/billing.admin` role on the billing account.
    - The `roles/resourcemanager.folderCreator` role.
-
+   - The `roles/securitycenter.admin` role.
+   ```bash
+     # example:
+     gcloud organizations add-iam-policy-binding ${ORG_ID}  --member=user:$SUPER_ADMIN_EMAIL --role=roles/securitycenter.admin --quiet > /dev/null 1>&1
+   ```
+1. Enable the following additional services on your current bootstrap project:
+   ```bash
+    gcloud services enable cloudresourcemanager.googleapis.com
+    gcloud services enable cloudbilling.googleapis.com
+    gcloud services enable iam.googleapis.com
+    gcloud services enable cloudkms.googleapis.com
+    gcloud services enable servicenetworking.googleapis.com
+   ```
 ### Optional - Automatic creation of Google Cloud Identity groups
 
 In the foundation, Google Cloud Identity groups are used for [authentication and access management](https://cloud.google.com/architecture/security-foundations/authentication-authorization) .