GCP Access Management

Access to your GCP environment is done by using a service account spotter@cloud2-core-spotter.iam.gserviceaccount.com

Configure Organisation Access

1. Grant the above service account to your organisation account with the following roles

   CODE

   roles/securitycenter.adminViewer
   roles/recommender.viewer

Configure Billing Data Access

If you have multiple billing projects or datasets, you need to repeat these steps for each

1. Grant the above service account to your billing project with the following role

   CODE

   roles/bigquery.jobUser

2. Grant the above service account to your billing data table with the following role

   CODE

   roles/bigquery.dataViewer