Requirements

A Google account or Google Service account with sufficient IAM permissions to authorize access to your Google Cloud organisation or project.

Permissions

Scope: Service Account

Your personal account is used only for authorization. We impersonate your service account with limited permissions.

Personal Account scope:

• Service Account Token Creator — creates short-lived credentials (OAuth tokens, OIDC tokens, JWTs)

Service account scope:

• Browser
• Cloud Asset Viewer
• Security Reviewer

What data we collect in this connection?

Copla collects Assets and Access Control information.

Default Resources

• Cloud Asset Inventory

Step-by-Step Guide