Cloud Integration: On-board GCP (Per-project)

Owned by Eric Castro
Last updated: Mar 07, 2024 by Thomas Sileo
3 min read

Pre-Requisite: In order to complete the following onboard steps you will need to have privileges to: edit a GCP project and create a service account.

Step 1: Select the desired GCP project

  • Ensure that the project is currently selected in the project list drop down in the top of the GCP console.

Step 2: Enabling APIs for your project

Click on each link below and then “Enable API” button near the top of the page.

Step 3: Create a service account in the GCP project

Go to https://console.cloud.google.com/iam-admin/serviceaccounts/create and then:

  1. Enter any name for the “Service account name” of “DataTheoremDiscovery”. For the description field, enter a meaningful description such as:
    "This service account will be used by Data Theorem to perform resource discovery".
    Click on Create near the bottom.

  2. Click on “Continue” on the Service Account Permissions page. You will be adding permissions later.

  3. On the final page, click on “+ CREATE KEY” near the bottom of the page. On the right sidebar, ensure “JSON” is selected and then click on CREATE. Save the JSON (used in Step 6) file. Close the warning dialog that may appear.

  4. Click on “DONE” near the bottom of the page.

  5. Copy the email of the new service account that will now appear in the list of service accounts for

    your project

Step 4: Add the new service account as a member to the project’s IAM

Go to https://console.cloud.google.com/iam-admin/iam and then:

  1. At the top of the page, click the project selection drop-down list (the down arrow). In the window that appears, click on “ALL” above the table, and then make sure your project is selected.

  2. Click on ADD near the top of the page.

  3. In the sidebar that will appear from the right, add the newly created service account’s email in the

    “New members” field

  4. Click on select a role, and type in “Security Reviewer”, select the “Security Reviewer” role from

    the list below the input field.

  5. Click on Add Another Role and do the same as above for “Firebase Viewer”

  6. Click on Add Another Role and do the same as above for “Service Controller”

  7. Click on Add Another Role and do the same as above for “App Engine Viewer”

  8. Finally, click on “Save”

Step 5: Onboarding additional projects

You can re-use the same service account that was created in the steps above, to onboard additional projects.

Repeat Step 4 for every project you want to onboard, always using the same service account email that was used for the first project.

Step 6: Send the JSON file to Data Theorem to confirm onboarding

Completing the above steps will have your GCP projects ready for integration, but we currently don’t support per-project onboarding through the Portal.

Instead, you must send the JSON file (from Step 3) to  support@datatheorem.com for us to confirm onboarding.

We will let you know as soon as it is done, or inform you of any issues or missing configuration.