GCP list projects wtih Golang API

I am trying to learn more Go, and my first program is to list all the projects in our GCP org (API equivalent of gcloud projects list). Later I want to take this as a springboard to create machine images when a Compute Engine label is updated.

I am using this boilplate from the Google API docs:

"ListProjects lists projects that are direct children of the specified folder or organization resource."

package main

import (
        resourcemanager "cloud.google.com/go/resourcemanager/apiv3"
        "context"
        "google.golang.org/api/iterator"
        resourcemanagerpb "google.golang.org/genproto/googleapis/cloud/resourcemanager/v3"
)

func main() {
        ctx := context.Background()
        c, err := resourcemanager.NewProjectsClient(ctx)
        if err != nil {
                // TODO: Handle error.
        }
        defer c.Close()

        req := &resourcemanagerpb.ListProjectsRequest{
                // TODO: Fill request struct fields.
                // See https://pkg.go.dev/google.golang.org/genproto/googleapis/cloud/resourcemanager/v3#ListProjectsRequest.
        }
        it := c.ListProjects(ctx, req)
        for {
                resp, err := it.Next()
                if err == iterator.Done {
                        break
                }
                if err != nil {
                        // TODO: Handle error.
                }
                // TODO: Use resp.
                _ = resp
        }
}

I realize there are "TODO" pieces here that I don't have completed. Can someone help to suggest how I can take this boilplate and get a simple list of projects? It feels like I am lacking some form of identifying my org or my project, but since I want the entire list of projects, it seems like I am not conveying my org id in the API call?

For now I am getting "PermissionDenied desc = The caller does not have permission". However, I know that I have Google Application Default credentials setup because I can do another API call in go to list compute instances.

Using APIs Explorer for Cloud Resource Manager API v3 projects.search

ORGANIZATION=[[YOUR-ORG]]
PROJECT=[[YOUR-PROJECT]] # Service Accounts are owned by Projects
ACCOUNT="tester"

# Enable Cloud Resource Manager API in a Project
# This Project will own the Service Account too
gcloud services enable cloudresourcemanager.googleapis.com \
--project=${PROJECT}

# Create the Service Account
gcloud iam service-accounts create ${ACCOUNT} \
--project=${PROJECT}

EMAIL=${ACCOUNT}@${PROJECT}.iam.gserviceaccount.com
 
# Create a Service Account Key locally
# For testing purposes only
gcloud iam service-accounts keys create ${PWD}/${ACCOUNT}.json \
--iam-account=${EMAIL} \
--project=${PROJECT} 

# Ensure the Service Account can browse the Organization's resources 
gcloud organizations add-iam-policy-binding ${ORGANIZATION} \
--role=roles/browser \
--member=serviceAccount:${EMAIL}
 
export GOOGLE_APPLICATION_CREDENTIALS=${PWD}/${ACCOUNT}.json
export ORGANIZATION

go run .

And:
main.go:

package main

import (
	"context"
	"fmt"
	"log"
	"os"

	resourcemanager "cloud.google.com/go/resourcemanager/apiv3"
	resourcemanagerpb "google.golang.org/genproto/googleapis/cloud/resourcemanager/v3"

	"google.golang.org/api/iterator"
)

func main() {
	organization := os.Getenv("ORGANIZATION")
	if organization == "" {
		log.Fatalf("unable to obtain ORGANIZATION from the environment")
	}

	ctx := context.Background()
	c, err := resourcemanager.NewProjectsClient(ctx)
	if err != nil {
		log.Fatal(err)
	}
	defer c.Close()

	rqst := &resourcemanagerpb.SearchProjectsRequest{
		Query: fmt.Sprintf("parent:organizations/%s", organization),
	}
	it := c.SearchProjects(ctx, rqst)
	for {
		resp, err := it.Next()
		if err == iterator.Done {
			break
		}
		if err != nil {
			log.Fatal(err)
		}

		log.Println(resp.DisplayName)
	}

}