This is the same flow a customer sees when they connect Ring Scan to a real GCP organization. The findings below come from a frozen sample tenant, not a live account, so the demo is repeatable on stage.
Connecting to Acme Holdings demo tenant
Read-only role assumed . scoped tokens . zero data exfiltration