Integrating GCP for ITP Discovery with the Delinea Platform

Integrate the Google Cloud Platform (GCP) with the Delinea Platform (ITP) to enhance identity-centric security. It strengthens access management and secures privileged identities within your GCP environment.

The GCP integration supports Identity Threat Protection (ITP). It is not a Privilege Control for Cloud Entitlements (PCCE) source.

Who Is Involved

The integration spans three systems. You might need help from the administrator of each one:

  • Google Cloud Platform: An administrator who can run scripts, create service accounts and buckets, and grant permissions.

  • Google Workspace: An administrator who can grant domain-wide delegation to the service account. You also need the email address of a Google Workspace super admin, but not its password.

  • Delinea Platform: A user with ITP admin permissions and access to the GCP service account secret in the vault.

Integration Tasks

Complete the following tasks in order:

  1. Confirm the prerequisites.

  2. Set up the bucket and service account in GCP, and create the service account key.

  3. Grant the service account domain-wide delegation in Google Workspace.

  4. Store the key in the vault and create the discovery source in the Delinea Platform.