Issue: The global-multilayer-demo currently does not explicitly document, or provide ready-to-use provisioning scripts, for some important pre-requisite org-level settings. Specifically, information related to Org Policies and the super-user IAM permissions needed to apply these Org Policies is missing.
Proposed enhancement: Create a top-level folder in repo for the org-level configurations (i.e., policies/IAM) that users can optionally use for troubleshooting purposes. This folder will contain:
- A README which explains exactly what Org Policies and IAM permissions are required, and example CLI commands that can be used to provision these resources
- A standalone Terraform module that defines any necessary Org Policies
- A reference in the main README which points to this top-level directory as a suggested troubleshooting step
If the end user does not have the ability to make these org-level configurations themselves, then this README will serve as a reference that can be shared with a Platform Admin who can apply these changes.