Unable to Create or Retrieve Organization/Project Policies via GCP API or Postman Despite Having Owner/Admin Role

I’m trying to create and retrieve organization and project policies in Google Cloud Platform (GCP) using the Resource Manager API via Postman. I have the Owner and Project Editor/Admin roles on the project, but every attempt to create a policy (e.g., using setOrgPolicy) or retrieve one (e.g., getOrgPolicy) results in a permission denied or 403 error.

Hello! :waving_hand:

Thanks for reaching out! In this forum, you’ll find focused threads for Application Integration, which is Google Cloud’s Integration Platform as a Service (iPaaS) for building automated workflows.

To make sure you get the most accurate help from our community experts, could you please confirm if the issue you’re facing involves using Application Integration?

If it does, please share a few more details about your workflow. Thanks!

Hello @Sinchana_K_R ,

It works as expected. To be able to get or create Organization Policies, you have to have assigned Organization Policy Administrator IAM role, at the Organization level, because this role contain mentioned permission.

Below I’ve posted all IAM roles which contain orgpolicy.policy.set permission

cheers,
Damian | GDE for Google Cloud