Add GCP Cloud Accounts

To manage your Google Cloud Platform (GCP) service account's resources in Commander, add the service account as a cloud account. To do so, provide the private key for the service account.

If you want to update the private key for a GCP service account, see Update the Private Key for GCP Service Accounts.

Important: See Getting started with GCP for a list of tasks to complete before adding a GCP cloud account.

1. Click the Infrastructure, Applications, or Storage tab.
2. Select the root node of the Infrastructure, Applications, or Storage tree.
3. At the top of the Summary page, click Add Cloud Account.
4. In the Add Cloud Account dialog, from Cloud Account Type, select Google Cloud Platform.
5. For Name, enter a name that will help identify this cloud account. Note that Service Portal users may see this name if they have permission.
6. For Private Key (JSON) File, browse to the location of the private key for the Commander service account.

   If you haven't already created a service account and downloaded its private key, see Create a service account for Commander to access GCP.

   Commander validates the file to ensure that it's a private key file in JSON format. If the file is valid, Commander displays the Client ID and the Client Email for this service account.

7. For Update Frequency, enter a value from 10 to 180, in minutes. Commander retrieves changes from GCP and generates events based on these changes. By default, Commander waits 60 minutes between updates.

   This setting affects only how often configuration changes made in GCP are retrieved; changes made within Commander are displayed as soon as the task has finished.

   More frequent updates (meaning lower values for this setting) may impact performance, especially in large installations.

8. If Internet access is established through a web proxy server, enable Use Public Cloud Proxy.

If you haven't already integrated your web proxy server with Commander, click Add Public Cloud Proxy Server and configure the proxy. This task requires the Superuser role. See Connect Public Clouds through Web Proxy Servers for instructions.

9. If you want to synchronize GCP labels and Commander custom attributes, for Sync Labels and Custom Attributes, click Configure.
1. In the Synchronize GCP Labels and Commander Custom Attributes dialog, enable Import GCP Labels as Commander Custom Attribute as required.
2. To exclude certain GCP labels from synchronization, enter them as a comma-separated list in the Excluded Labels text field.
3. Click OK.

For more information, see Synchronize GCP Labels and Commander Custom Attributes.

10. Click OK to add the cloud account.

Update permissions for GCP cloud accounts

You can update the permissions granted to a GCP cloud account. For example, if you want to change the visibility of resources — you can create a new service account and upload a new private key file.

1. In the GCP console, create a new service account and grant it permissions. Follow the steps in Create a service account for Commander to access GCP, Enable the required APIs, and Grant permissions to the Commander service account
2. In Commander, click the Infrastructure, Applications, or Storage tab.
3. From the Inventory tree, select a cloud account.
4. Select Actions > Edit Cloud Account.
5. In the Edit Cloud Account dialog, for Private Key (JSON) File, browse to the location of the new private key for the Commander service account.

   Commander validates the file to ensure that it's a private key file in JSON format. If the file is valid, Commander displays the Client ID and the Client Email for this service account.

6. Click OK.