You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ERROR: (gcloud.scc.notifications.describe) PERMISSION_DENIED: Caller does not have required permission to use project validator-project-111111. Grant the caller the roles/serviceusage.serviceUsageConsumer role, or a custom role with the serviceusage.services.use permission, by visiting https://console.developers.google.com/iam-admin/iam/project?project=validator-project-111111 and then retry. Propagation of the new permission may take a few minutes. This command is authenticated as [email protected] which is the active account specified by the [core/account] property. Impersonation is used to impersonate [email protected].
- '@type': type.googleapis.com/google.rpc.Help
links:
- description: Google developer console IAM admin
url: https://console.developers.google.com/iam-admin/iam/project?project=validator-project-427516
- '@type': type.googleapis.com/google.rpc.ErrorInfo
domain: googleapis.com
metadata:
consumer: projects/validator-project-427516
service: securitycenter.googleapis.com
reason: USER_PROJECT_DENIED
I was able to run this successfully without impersonation, much like the instructions under the README.md under the 1-org folder under step 3:
I was able to reproduce the same error if I set the billing/quota_project in the gcloud configuration.
If I unset the billing quota project the error is not reproduced.
The SCC API bills the API in the project that is the parent of the Service Account used, but if a billing/quota_project is set it will try to bill the quota project instead. In this case the service account will need the roles/serviceusage.serviceUsageConsumer role.
I will add a note in the instructions to highlight that when using service account impersonation.
If you follow the README-GitHub.md, under
Deploying step 1-org
, step 10:produces this error:
I was able to run this successfully without impersonation, much like the instructions under the README.md under the
1-org
folder under step 3:Unsure what the correct course of action here is, however I thought you should be aware of the discrepancies between the two instructions.
The text was updated successfully, but these errors were encountered: