Skip to main content

Onboard an individual project to VRM

Users can onboard a single project integration instead of completing organization-level onboarding. The following steps outline how to onboard an individual project integration in VRM.

When onboarding to VRM, users are required to provide an API key file for a single integration.

Create a custom role

You can create a custom role at the project level in Google Cloud.

If you choose to use an existing role, you can skip this task. However, the role must include the required permissions for VRM to successfully ingest resources.

Ensure that you include the following required permissions by selecting the checkbox next to each listed permission:

  • compute.instances.get
  • compute.instances.list
  • compute.zones.list
  • storage.buckets.get
  • storage.buckets.list

Create a service account

You can create a service account in Google Cloud. If you're using an existing service account, you can skip this task.

Create a key

Create a key for a service account in Google Cloud.

Create the integration in VRM

Users can create individual GCP project integration in VRM. All API references are available in the API Documentation.

To complete this task:

  1. Use the Create Integration API. The integration will be created in an INACTIVE state. The state changes to ACTIVE after uploading the required secrets.
  • In the request body, specify the cloudServiceProvider as GCP.
  • You may optionally include a name for the integration.
  1. Retrieve the id field from the API response. This is required to perform further actions on the integration using other APIs.

Sample Response:

   {
"tenantId": "con_pOjUr2ZRJmv0jsij",
"id": "684a9e40bf81fb6dd37bffae",
"name": "GCP-20250529112357-07",
"accountId": null,
"accountName": null,
"organizationId": null,
...
"cloudServiceProvider": "GCP",
"state": "INACTIVE",
...
}
  1. Upload the credentials file using the Update AccessInfo (Update Secrets) API, and provide the integrationID in the request. For more information, see the API Documentation – Update AccessInfo from File.