Skip to main content
By default, Prowler scans all Google Cloud projects accessible to the authenticated user. To limit the scan to projects within a specific Google Cloud organization, use the --organization-id option with the GCP organization’s ID: 
prowler gcp --organization-id organization-id
Ensure the credentials used have one of the following roles at the organization level: Cloud Asset Viewer (roles/cloudasset.viewer), or Cloud Asset Owner (roles/cloudasset.owner).
With this option, Prowler retrieves all projects under the specified Google Cloud organization, including those organized within folders and nested subfolders. This ensures full visibility across the entire organization’s hierarchy.
To obtain the Google Cloud organization ID, use:
gcloud organizations list
⌘I