Skip to content
Last9 named a Gartner Cool Vendor in AI for SRE Observability for 2025! Read more →
Last9
Talk to an Expert

Create a GCP service account with read-only access

Step by step guide to create a GCP service account with read-only access for monitoring

Objective

A service account is required to access GCP environment resources for monitoring. This doc provides step by step information on creating a GCP service account with monitoring read-only access.

Once you have created the account, share the configuration with Last9 team so that the monitoring data can be sent to Last9.

Prerequisites

  • Go to the Google Cloud Console (console.cloud.google.com) account
  • Select the project in which you want to create the service account
  • Click on the “IAM & Admin” tab in the left navigation menu
  • Click on the “Service Accounts” tab Create Service Account

Creating Service Account

  • Click on the “Create Service Account” button
  • Enter following details
    1. Service Account Name: last9-monitor
    2. Service Account ID: last9-monitor
    3. Service Account Description: Allows Last9 API access to read resource metadata and monitoring data
  • Click on the “Create and Continue” button Create Service Account Form

Monitoring Viewer Role

Grant Permissions to this Service Account with Role as Monitoring Viewer.

Monitoring Viewer Role

Grant other users internal to your organization access to this Service Account(Optional) Add other users optionally

Generate Credentials

  • Click on the newly created Service Account to view more details Click on the Servive Account

  • Create a new Service Account Key Create a new Service Account Key Download the Service Account Key

  • Share the downloaded key with your Last9 team