iam-recommendations-fetcher

Name: iam-recommendations-fetcher
Availability: InStock
Author: Google

Fetch IAM recommendations and insights from Google Cloud targets.

17.1k|1.4k|Updated Mar 31, 2026

Search Tags:#google cloud #iam recommendations #security insights #iam analysis #google cloud Recommender API

Ready to run

npx skills add https://github.com/google/skills --skill iam-recommendations-fetcher-google

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: iam-recommendations-fetcher
Source: https://github.com/google/skills/tree/main/skills/cloud/iam-recommendations-fetcher
Command: npx skills add https://github.com/google/skills --skill iam-recommendations-fetcher-google

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gcloud, google-cloud-recommender, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the retrieval and initial analysis of IAM recommendations and insights from Google Cloud, simplifying security review processes.

Core Features & Use Cases

Fetch IAM Recommendations: Retrieve recommendations and associated insights from specified targets (Organizations, Folders, Projects).
Validate Target Scopes: Ensures proper format of input targets and handles ambiguities.
Fallback Flow for Retrieval: Uses MCP tools, gcloud CLI, or Google Cloud API as fallback methods.
Output Format Selection: Allows user to choose between JSON file or Markdown table format.
Error Handling: Stops execution and returns standardized error JSON upon failure.

Quick Start

Use the iam-recommendations-fetcher skill to retrieve IAM recommendations for your organization by providing the organization ID: "Fetch IAM recommendations for org '123456789012'".

Frequently Asked Questions about iam-recommendations-fetcher

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I fetch IAM recommendations for a Google Cloud organization?▼

To fetch IAM recommendations, provide a valid target scope like an organization ID, folder, or project ID. The skill validates the input format and retrieves recommendations using MCP tools, gcloud CLI, or direct Google Cloud API calls.

What are Google Cloud IAM recommendations and insights used for?▼

Google Cloud IAM recommendations and insights are used for security reviews and IAM policy management. They identify overly permissive roles and suggest safer alternatives, simplifying the process of auditing access controls across your cloud environment.

Can I retrieve IAM analysis for folders and projects, not just organizations?▼

Yes, you can retrieve IAM analysis for folders and projects. The skill validates target scopes across organizations, folders, and projects to ensure proper formatting before attempting to fetch recommendations and insights.

Do I need gcloud CLI to retrieve Google Cloud security insights?▼

You do not strictly need gcloud CLI as the only method, but it is a required dependency. The skill uses a fallback flow that attempts retrieval via MCP tools, then gcloud CLI, and finally direct Google Cloud API calls.

What output formats are available for Google Cloud IAM analysis results?▼

Available output formats for IAM analysis results are a JSON file or a Markdown table. You select the desired output format, and the skill returns the fetched recommendations and insights in that structure.

Why does my IAM recommendations retrieval stop and return an error?▼

Your IAM recommendations retrieval stops and returns a standardized error JSON upon failure. This built-in error handling triggers when the target scope format is invalid or if retrieval fails across MCP tools, gcloud CLI, and API fallbacks.