Service Account configuration for using gcloud identity group member list

[mluisl]

Hi, I need to set up a service account to allow an application to run the following command.
gcloud identity group member list --group-email="group_name@domain"

The purpose of the application is to extract all members of all groups within a set of projects.

My question is what are the permissions I should give to the service account?

Thank you very much in advance.

[pfilourenco]

Hi,

Did you tried on the admin console(google workspace) give the :

• Groups Editor has the permissions of a Groups admin, except for the privilege required to add or remove a security label on a Groups resource.

BR,

Pedro Lourenço

[mluisl]

Hi, I was looking at the Admin Console in the IAM section but I couldn't find the Groups Editor role/group to link it to my service account.

[pfilourenco]

Hi,

You don't see this?

BR,

Pedro Lourenço