> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Cloud

> Discover Google Cloud resources with Cloud Asset Inventory and import Security Command Center findings.

## Overview

Tierity connects to a Google Cloud project with a service account key. Each scan lists the project's resources through Cloud Asset Inventory and imports findings from Security Command Center, so cloud findings sit alongside the rest of your queue.

## Prerequisites

* Permission to create service accounts and keys in the project
* Cloud Asset API enabled in the project, and Security Command Center enabled if you want its findings
* Manage access (or higher) in Tierity

## Credentials required

| Field | Description |
| - | - |
| **Service Account Key (JSON)** | The full JSON key for a read-only service account. The project is read from the key. |

The key is encrypted before it's stored, and Tierity never shows it again after you save it.

## Setup

**1. Create a service account**

In the Google Cloud console, go to **IAM & Admin → Service Accounts → Create service account** and name it `tierity`.

**2. Grant read-only roles**

Give it these roles on the project:

* **Cloud Asset Viewer** (`roles/cloudasset.viewer`)
* **Security Center Findings Viewer** (`roles/securitycenter.findingsViewer`)

**3. Create a key**

Open the service account, go to **Keys → Add key → Create new key**, choose **JSON**, and download it.

**4. Connect in Tierity**

Go to **Config → Integrations → GCP**, paste the contents of the JSON key, and click **Test connection**. Add one connection per project.

## What gets synced

* **Resources:** everything Cloud Asset Inventory reports for the project, with type, location and labels
* **Findings:** Security Command Center findings with severity, category and the affected resource

Run a scan any time from the GCP page in the sidebar.

## Disconnecting

Go to **Config → Integrations → GCP** and remove the connection, then delete the key in Google Cloud.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.