What permissions should I have in my Google account to enable Site24x7 Google Cloud Platform (GCP) Monitoring?
The following permissions should be given to a GCP Service Account to monitor and manage your GCP resources in the Site24x7 web client:
- Ensure the roles Compute Viewer, Cloud Asset Viewer, Browser, and Viewer are provided to the service account associated with the project.
- Under Management Actions, to start/stop VMs, ensure the service account is provided a custom role with the following roles enabled:
- compute.instances.start
- compute.instances.stop
To create a custom role, in your Google Cloud console, navigate to IAM & Admin > Roles. Click + CREATE ROLE.
Name the role, for example: Custom VM Start/Stop Role.
Alternatively, you can provide the Viewer role for the required service type and Monitoring Viewer role to perform resource discovery and monitoring for that service type.
For example, provide the roles Compute Viewer and Monitoring Viewer for the service type Compute Engine to discover and monitor the Compute Engine resources.
For detailed instructions on how to create a service account for monitoring Site24x7 and to know more about the permissions and roles, refer to our help document here.
Not having a service account in your GCP console yet? Learn more on how to create a service account.
Related Articles
How does resource termination settings work for Google Cloud (GCP) monitoring?
In the Add/Edit Google Cloud (GCP) Monitor page (Site24x7 > Cloud > GCP > Add GCP Monitor), the option Automatically Remove Terminated Resources under Resource Termination Settings lets you remove terminated resources (in Google Cloud Console) from ...How to re-add deleted monitors in Google Cloud monitoring
You cannot re-add resources that have been deleted or terminated from the Google Cloud console. Log in to Site24x7 and go to Cloud > GCP > click the Google Cloud project or Google Cloud monitor > Management Actions. Scroll down to the Add Deleted ...How to create a service account in the GCP console?
A service account as a JSON file is required to authenticate Site24x7 to perform GCP resource discovery and monitoring. To create a service account, follow the steps below: Log in to your GCP console and click on the hamburger icon at the top left ...Possible reasons why GCP resources are not added for monitoring in Site24x7
Please check for one or more of the below reasons: Discovery of the resource type has been disabled under Select the Resources for Monitoring section in Add/Edit GCP Monitor page in the Site24x7 portal. Exclude/Include GCP Resources using ...What permissions should I have in my Microsoft Azure account to use the Site24x7 App for monitoring?
You can auto-discover and monitor all your Azure resources by authenticating with the Site24x7 App. The following permissions are required to monitor your Azure resources with the Site24x7 App: A Microsoft Azure account with Owner role for the Azure ...