Skip to main content

Documentation Index

Fetch the complete documentation index at: https://conductorone-docs-google-workspace-action-examples.mintlify.app/llms.txt

Use this file to discover all available pages before exploring further.

​
Before you begin

To complete this guide, you’ll need:
  • C1 Connector Administrator role or Super Administrator role
  • A Google Cloud Platform account
  • Ability to set up a service account in GCP
Estimated time: 30 minutes

​
Step 1: Integrate your GCP instance

Start by integrating your GCP instance with C1 by following the instructions in Google Workspace & Google Cloud Platform. Once connected, C1 ingests all of the projects, resources, and entitlements for Google Cloud. This includes projects and roles. You can see all the resources and entitlements by navigating to Apps > Google Cloud Platform and clicking the Entitlements tab.

​
Step 2: Configure GCP projects for JIT access

Now that GCP is hooked up to C1, set GCP projects and roles as available for just-in-time access. To do this, we’ll configure access controls for each of the GCP projects.
1
Navigate to the Apps page, then click the Google Cloud application created in Step 1.
2
On the Setup tab, in the Entitlement configuration rules section of the page, click Edit.
3
In the configuration rules pane, click the toggle to Enable configuration rules.
4
Select the Project resource type.
5
Use the Access profiles dropdown to select Everyone.
6
Finally, check the box at the bottom of the screen and click Apply.
The new settings are applied, and a summary of the configuration is shown in the Entitlement configuration rules section of the page.
Don’t worry,you can change who can request access, for how long, and the policy for approving access later.

​
Step 3: Request JIT access

Let’s go request GCP JIT access!
1
Click Requests and make sure that App catalog is selected.
2
Click Google Cloud Platform. A panel opens with the projects available for you to request.
3
Click on the project you want to request, then click Request.
4
Enter the justification and click Request.

​
Success!

The request policy routes the request through the approval process. The new access will be automatically provisioned by the GCP connector, and then automatically removed upon expiration.