mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-07-23 12:31:54 +00:00
Andoni Alonso
30 lines
917 B
Plaintext
30 lines
917 B
Plaintext
---
|
||
title: 'Scanning a Specific GCP Organization'
|
||
---
|
||
|
||
By default, Prowler scans all Google Cloud projects accessible to the authenticated user.
|
||
|
||
To limit the scan to projects within a specific Google Cloud organization, use the `--organization-id` option with the GCP organization’s ID:
|
||
|
||
```console
|
||
prowler gcp --organization-id organization-id
|
||
```
|
||
|
||
<Warning>
|
||
Ensure the credentials used have one of the following roles at the organization level:
|
||
Cloud Asset Viewer (`roles/cloudasset.viewer`), or Cloud Asset Owner (`roles/cloudasset.owner`).
|
||
|
||
</Warning>
|
||
<Note>
|
||
With this option, Prowler retrieves all projects under the specified Google Cloud organization, including those organized within folders and nested subfolders. This ensures full visibility across the entire organization’s hierarchy.
|
||
|
||
</Note>
|
||
<Note>
|
||
To obtain the Google Cloud organization ID, use:
|
||
|
||
```console
|
||
gcloud organizations list
|
||
```
|
||
|
||
</Note>
|