Agentless service account deployment lacks organization permissions

[orouz]

Describe the bug

in agentless, deploying a service account for CSPM GCP organization-account ends up not fetching resources due to lack of permissions.

To Reproduce

1. deploy agentless in qa env
2. deploy CSPM GCP, pick agentless mode
3. open cloudshell, paste command to deploy the service account
4. copy the service account JSON and paste in integration installation
5. go to agent logs, see Permission Denied errors

Expected behavior

• no permission denied errors

Additional context

• fix was verified by manually granting the service account email access to the "roles/cloudasset.viewer", "roles/browser" roles on the organization level

---

• add GCP credentials deployment  #2118
• [CIS GCP] Deployment Manager Organization Integration test  #1781