Skip to content

Commit 03abda6

Browse files
authored
Merge pull request #203637 from kenwith/patch-14
Adds info for GA on GCP.
2 parents df7c527 + 52b0d3f commit 03abda6

File tree

1 file changed

+28
-0
lines changed
  • articles/active-directory/cloud-infrastructure-entitlement-management

1 file changed

+28
-0
lines changed

articles/active-directory/cloud-infrastructure-entitlement-management/onboard-gcp.md

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,24 @@ To view a video on how to configure and onboard GCP accounts in Permissions Mana
4747

4848
### 2. Set up a GCP OIDC project.
4949

50+
Choose from 3 options to manage GCP projects.
51+
52+
#### Option 1: Automatically manage
53+
54+
This option allows projects to be automatically detected and monitored without additional configuration. Steps to detect list of projects and onboard for collection:
55+
56+
- Grant Viewer and Security Reviewer role to service account created in previous step at organization, folder or project scope.
57+
58+
Any current or future projects found get onboarded automatically.
59+
60+
To view status of onboarding after saving the configuration:
61+
62+
- Navigate to data collectors tab.
63+
- Click on the status of the data collector.
64+
- View projects on the In Progress page
65+
66+
#### Option 2: Enter authorization systems
67+
5068
1. In the **Permissions Management Onboarding - GCP OIDC Account Details & IDP Access** page, enter the **OIDC Project ID** and **OIDC Project Number** of the GCP project in which the OIDC provider and pool will be created. You can change the role name to your requirements.
5169

5270
> [!NOTE]
@@ -59,6 +77,16 @@ To view a video on how to configure and onboard GCP accounts in Permissions Mana
5977
You can either download and run the script at this point or you can do it in the Google Cloud Shell, as described [later in this article](onboard-gcp.md#4-run-scripts-in-cloud-shell-optional-if-not-already-executed).
6078
1. Select **Next**.
6179

80+
#### Option 3: Select authorization systems
81+
82+
This option detects all projects that are accessible by the Cloud Infrastructure Entitlement Management application.
83+
84+
- Grant Viewer and Security Reviewer role to service account created in previous step at organization, folder or project scope.
85+
- Click Verify and Save.
86+
- Navigate to newly create Data Collector row under GCP data collectors.
87+
- Click on Status column when the row has “Pending” status
88+
- To onboard and start collection, choose specific ones from the detected list and consent for collection.
89+
6290
### 3. Set up GCP member projects.
6391

6492
1. In the **Permissions Management Onboarding - GCP Project Ids** page, enter the **Project IDs**.

0 commit comments

Comments
 (0)