Permissions to enable GCP Monitoring

What permissions should I have in my Google account to enable Site24x7 Google Cloud Platform (GCP) Monitoring?

The following permissions should be given to a GCP Service Account to monitor and manage your GCP resources in the Site24x7 web client:  
  1. Ensure the roles listed in the table below are provided to the service account associated with the project, depending on the monitor you want to create.
  2. For Management Actions, to start/stop VMs, like start/stop VMs, ensure the service account is provided a custom role with roles listed in the table below.

Permissions required
For monitoring performance metrics
  1. Viewer
  1. Viewer
  2. Browser
For IT Automation actions

  1. compute.instances.start
  2. compute.instances.stop
  3. compute.instances.reset
  4. compute.instantSnapshots.create

  1. compute.instances.start
  2. compute.instances.stop
  3. compute.instances.reset
  4. compute.instantSnapshots.create
For management actions (like start/stop VMs)
  1. compute.instances.start
  2. compute.instances.stop
  1. compute.instances.start
  2. compute.instances.stop

Notes
Assigning permissions at the organization level, transfers the same permissions to all the projects associated to it. For project monitoring, permissions have to be provided for each project.
To create a custom role, in your Google Cloud console, navigate to IAM & Admin > Roles. Click + CREATE ROLE.
Name the role, for example: Custom VM Start/Stop Role.

Alternatively, you can provide the Viewer role for the required service type and Monitoring Viewer role to perform resource discovery and monitoring for that service type.
For example, provide the roles Compute Viewer and Monitoring Viewer for the service type Compute Engine to discover and monitor the Compute Engine resources.

Idea
For detailed instructions on how to create a service account for monitoring Site24x7 and to know more about the permissions and roles, refer to our help document here.


Not having a service account in your GCP console yet? Learn more on how to create a service account.
    • Related Articles

    • Exclude Site24x7 monitoring traffic from Google Analytics

      You can exclude traffic from the Site24x7 Web Transaction (Browser) monitor and Webpage Speed (Browser) traffic from Google Analytics in two ways. To exclude traffic for the Web Defacement monitor, you can follow the first method. 1. Creating a ...
    • How does Site24x7 always ensure the availability of its location agents during monitoring?

      Site24x7 uses a preferred location recheck logic in the back-end to ensure the availability of all monitoring locations. This logic is only applied when you've disabled the option "Restrict monitoring within selected locations" in the Add or Edit ...
    • How to uninstall the Site24x7 Windows Server Monitoring Agent

      Method 1: To uninstall the Site24x7 Windows Server Monitoring Agent, click the link below: https://staticdownloads.site24x7.com/server/Site24x7WindowsAgentUninstall.zip Unzip and execute the Uninstall.bat file in the Command Prompt as an ...
    • Troubleshooting false positive alerts in monitoring

      Problem False positive alerts are being generated. Possible cause The monitoring system is down in some locations. The Website monitor might be configured for one location, such as Seattle, but may appear down when accessed from another location, ...
    • How to enable or disable anomaly alerts

      Understanding alerts In Site24x7, there are two different types of alerts in anomaly detection: Status change alert: Triggered when there is a change in the monitor status, such as Trouble, Critical, or Down. Anomaly alert: Triggered when irregular ...