💳 Note: Google requires you to set up a billing account to use projects. If you don’t have one, you’ll need to create it before proceeding. This ConfigView integration does not incur any cost in Google Cloud. If you already have a billing account, simply choose your Organization and Location during project creation.
- Go to: https://console.cloud.google.com/
- Click the project dropdown (top-left) > New Project
- Recommended Project Name:
configview-integration - Choose your Organization and Location
- Click Create
- Select the project from the dropdown
✅ Step 2: Enable Required APIs
~~In the ~~project created above- Go to: https://console.cloud.google.com/apis Click Enable API’s and services.
- Enable the following APIs by searching for them and clicking on the links below:
- Cloud resource Manager api https://console.cloud.google.com/marketplace/product/google/cloudresourcemanager.googleapis.com
- https://console.cloud.google.com/apis/library/policyanalyzer.googleapis.com
✅ Step 3: Create a Service Account and JSON Key
- Visit: Service Accounts
- Click + CREATE SERVICE ACCOUNT
- Name it:
configview-saNote: The Service Account ID generated will also need to match this name. - Click Create and Continue
- (Optional) Skip assigning roles
- Click Done
- Open the service account > Click Keys > click Add Key > Create new key > choose Json > click Create.
Save Json file as:google_admin.jsoncase sensitive - Go back to Details > Click Advanced Settings.
- Set product name to:
ConfigView App - Enable G Suite Domain-wide Delegation.
- Click Save.
✅ Step 4: Rename JSON Key
- A key file was downloaded in the previous step.
- 🔁 Rename the file to:
google_admin.jsonThis is required for ConfigView to authenticate with Google Workspace. - move it to your server at this exact path:
/opt/configview-dashboard-backend/json/google_cloud.json
- In the Google Cloud Console, click the Project/Organization picker dropdown at the very top left (next to the Google Cloud logo).
- Select your Organization (it usually has a little building icon next to it). Note: You must be a Google Workspace Super Admin or an Organization Administrator to do this.
- Navigate to IAM & Admin > IAM.
- Click + GRANT ACCESS (or Add) at the top.
- In the “New principals” box, paste the Service Account email you copied in Step 1.
- In the “Assign roles” box, search for and select Browser. & serviceUsageViewer, securityReviewer ,serviceAccountViewer, policyanalyzer.activityAnalysisViewer (Beta)
- Click Save.