Creating Service Account and Access in GCP Account

Step 1: Create a Service Account and Assign Roles

  1. Login to Google cloud console

  2. Select the Project you want to integrate

  3. Click on IAM & Admin and then Service Accounts

  4. Click on Create service account

  5. Enter the Name and Description, then click on Create and continue

  6. Under Grant this service account access to project section, add the following Roles and click on Continue 

    1. Artifactregistry Viewer

    2. Cloud Build Viewer

    3. Cloud Functions Viewer

    4. Cloud Run Viewer

    5. Cloud Storage for Firebase Viewer

    6. Cloud Task Viewer (Beta)

    7. Compute Viewer

    8. DNS Viewer

    9. Firebase Viewer

    10. IAM Viewer

    11. Pub/Sub Viewer

    12. Secret Manager Viewer

    13. View Service Accounts



  1. Click on Done in the button
    Note: Grant users access to this service account can left optional


Step 2: Generate a JSON Key

  1. Click and open the Service Account created go to Keys tab

  2. Add Key and Create new key

  3. Select JSON format and click on Create

  4. .json file will be downloaded to the local


Step 3: Enabling APIs

  1. Navigate to API & Services and then Library

  2. Search for the following APIs and make sure they are enabled

    1. cloudasset.googleapis.com

    2. iam.googleapis.com

    3. cloudresourcemanager.googleapis.com

Onboarding GCP account to aps1.icompaas.com

Step 1: Sign in to the https://app.icompaas.com portal.



Step 2: On the left pane, click on Account settings, click Onboarding, and select GCP(Google Cloud Platform


Step 3: Give your GCP environment a meaningful name and upload the JSON we have downloaded in the step2



Step 4:  Then click on the Save & start scan.