Perform Prerequisite Steps for Enabling GCP Monitoring
- In Google cloud console, open the Manage resources page and create a new project or use an existing project.
-
Enable required APIs.
Click API and Services > Library.
-
In the search box, search for and enable these APIs:
- Admin SDK API
- Cloud Resource Manager API
- Stackdriver Logging API or Stackdriver API
-
Create required roles for Monitoring.
-
Access
https://admin.google.com/
and click Account > Admin roles. - Click create new role.
- Select Account > Admin roles and click on Create new role.
- Under Role info, enter a role name and click Continue.
- Click the Select Privileges tab, select Reports, and click Continue.
- Click CREATE ROLE.
- Access the Custom Role page and click the Assign members tab.
-
Under Add members, add a user (member) or search and select a user.
This user will be used for onboarding purposes
- Click ASSIGN ROLE.
-
Access
- Go to the IAM & Admin page in GCP.
- Select the user for which you assigned a role in step 11 for onboarding purposes.
- In the IAM page, under Permissions for your project, click GRANT ACCESS
- In the Add principals field, search and add the same user that you selected and assigned a role in step 11.
- Assign the Viewer and Logs Viewer roles to the user.
- Click Save.
- In GCP, click Products > APIS & Services > OAuth consent screen.
-
Under Authorized domains, add the authorized domain name.
Contact the Lookout Professional Services team to obtain this domain name.
- Click Save.