Making sure new Projects in a GCP Organization can be discovered - Adaptive Applications - BlueCat Gateway - 25.3

When running Organization-level discovery and visibility, Cloud Discovery & Visibility (CDV) performs it on all Projects in an Organization. To make sure CDV can detect and access each Project, you must make sure any new Projects inherit the Permissions of its parent Organization. You must also enable the Compute Engine API for the new project.

To make sure new Projects can be found by Organization-level discovery and visibility, do the following when you create a new Project:

1. In GCP, make sure you select the new Project from the dropdown menu at the top.

2. In the left navigation menu, click IAM & Admin to open Google's IAM (Identity and Access Management) & Admin tool.

3. On the left panel, click Organization Policies.

4. Using the filter, search for the policy named constraints/iam.allowedPolicyMemberDomains.

5. For this policy, click Domain restricted sharing.

6. Click Manage policy, then configure the following:

   1. In Policy source, select Override parent's policy.

   2. In Policy enforcement, select Merge with parent.

   3. Click Add a rule, then set the policy value to Allow All.

   4. Click Set policy.

7. Enable the Compute Engine API for the project:

   1. If you haven't already done so, in GCP, make sure you select the new Project from the dropdown menu at the top.

   2. In the search bar at the top, search for Compute Engine API and select it.

   3. Click Enable to enable the API.