mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-07-23 04:21:52 +00:00
Rubén De la Torre Vico
9ca1899ebf
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com> Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
24 lines
911 B
Markdown
24 lines
911 B
Markdown
# Scanning a Specific GCP Organization
|
||
|
||
By default, Prowler scans all Google Cloud projects accessible to the authenticated user.
|
||
|
||
To limit the scan to projects within a specific Google Cloud organization, use the `--organization-id` option with the GCP organization’s ID:
|
||
|
||
```console
|
||
prowler gcp --organization-id organization-id
|
||
```
|
||
|
||
???+ warning
|
||
Ensure the credentials used have one of the following roles at the organization level:
|
||
Cloud Asset Viewer (`roles/cloudasset.viewer`), or Cloud Asset Owner (`roles/cloudasset.owner`).
|
||
|
||
???+ note
|
||
With this option, Prowler retrieves all projects under the specified Google Cloud organization, including those organized within folders and nested subfolders. This ensures full visibility across the entire organization’s hierarchy.
|
||
|
||
???+ note
|
||
To obtain the Google Cloud organization ID, use:
|
||
|
||
```console
|
||
gcloud organizations list
|
||
```
|