Permissions

Following is the list of permissions required and used by reOptimize:

• iam.roles.get
  
  Will allow us to view the permissions granted to the custom role. This is used to present the "state" of your role. If the permissions required by reOptimize are set correctly, the state will be "healthy". If there are any missing permissions or redundant permissions, a warning message will be shown to you in reOptimize.
  
  
• resourcemanager.organizations.get
  
  Used to get your organization details (name, display name)
  
  
• resourcemanager.folders.get,resourcemanager.folders.list
  
  Used to list and get a folders information (Name, Parent etc...). This allows us to construct the full path of a project in your OU.
  
  
• resourcemanager.projects.get, resourcemanager.projects.list
  
  Used to list and get projects in your OU. Will allow us see the parent folder (if any) for every project.

You may take a look on the Resource Manager API to see which fields are returned when listing/getting folders/projects.