From 66ab4d98634a85d168ccf82d6ab62c241e8da272 Mon Sep 17 00:00:00 2001
From: Slawomir Koszewski <slawek@koszewscy.waw.pl>
Date: Wed, 10 Jun 2026 01:42:20 +0200
Subject: [PATCH] Update README with detailed IAM policy binding instructions
 and group management for Gemini Code Assist

---
 README.md | 35 +++++++++++++++++++++++------------
 1 file changed, 23 insertions(+), 12 deletions(-)

diff --git a/README.md b/README.md
index 6b5902f..292c263 100644
--- a/README.md
+++ b/README.md
@@ -57,13 +57,24 @@ For workloads running on GCP (Cloud Run, GKE, Compute Engine), attach the servic
 
 ```bash
 # Single user
-gcloud projects add-iam-policy-binding PROJECT_ID \
-  --member="user:YOU@DOMAIN" \
+gcloud projects add-iam-policy-binding <project-id> \
+  --member="user:<you@domain>" \
   --role="roles/cloudaicompanion.user"
 
-# Google Group (recommended for teams)
-gcloud projects add-iam-policy-binding PROJECT_ID \
-  --member="group:devs@DOMAIN" \
+# Create a Google Group (recommended for teams)
+gcloud identity groups create devs@<domain> \
+  --organization=<organization-id> \
+  --display-name="Gemini Developers" \
+  --description="Users with access to Gemini Code Assist"
+
+# Add a member to the group
+gcloud identity groups memberships add \
+  --group-email=devs@<domain> \
+  --member-email=<you@domain>
+
+# Grant the group access
+gcloud projects add-iam-policy-binding <project-id> \
+  --member="group:devs@<domain>" \
   --role="roles/cloudaicompanion.user"
 ```
 
@@ -79,19 +90,19 @@ If you don't have a project yet:
 
 ```bash
 # List available folders to find your folder ID
-gcloud resource-manager folders list --organization=ORGANIZATION_ID
+gcloud resource-manager folders list --organization=<organization-id>
 
 # Create a new project inside a folder
-gcloud projects create PROJECT_ID \
-  --name="PROJECT_DISPLAY_NAME" \
-  --folder=FOLDER_ID
+gcloud projects create <project-id> \
+  --name="<display-name>" \
+  --folder=<folder-id>
 
 # Link a billing account (required before enabling APIs)
-gcloud billing projects link PROJECT_ID \
-  --billing-account=BILLING_ACCOUNT_ID
+gcloud billing projects link <project-id> \
+  --billing-account=<billing-account-id>
 
 # Verify
-gcloud projects describe PROJECT_ID
+gcloud projects describe <project-id>
 ```
 
 To find your billing account ID: