Integration profile
Discovery provider · Google Cloud
Discover organization, folder, project, and resource inventory through Cloud Asset Inventory.
Demo baseline · November 13, 2026Prerequisites
- Google Cloud organization or project scope
- Cloud Asset Inventory and Resource Manager APIs enabled
- Least-privilege service account or Workload Identity Federation
Configuration steps
- Choose organization, folder, or project scopes
- Grant Viewer and Cloud Asset Viewer
- Configure impersonation or workload identity
- Validate access and preview inventory
Provider fields
| Field | Type | Requirement and options |
|---|---|---|
Organization IDorganizationId | text | Optional |
Folder IDsfolderIds | tag_list | Optional |
Project IDsprojectIds | tag_list | Optional |
Quota / billing project IDbillingProjectId | text | Optional |
Discovery service accountserviceAccountEmail | Required | |
Workload identity providerworkloadIdentityProvider | text | Optional |
Impersonation chainimpersonationChain | tag_list | Optional |
Regionsregions | tag_list | Optional |
Cloud Asset resource typesassetTypes | tag_list | Optional |
Use Cloud Asset InventoryuseCloudAssetInventory | boolean | Optional |
Import labels and tagsincludeLabels | boolean | Optional |
Verify and troubleshoot
Test with the narrowest supported non-production scope. Confirm that the connection test reaches the expected provider and that the preview or receipt matches the intended scope. Check identity, credential references, network access and provider permissions before retrying. Record the failure stage and redact sensitive payloads when escalating.