August 2026 release is live Read More
Breadcrumbs

GCP Troubleshooting

Select Organization Scope.

  1. In GCP Console, select the scope dropdown located in the top left navbar, next to Google Cloud logo.

  2. Choose "ALL" tab.

  3. Choose the top organization.

Select the top-level GCP organization
Select the top-level GCP organization

Adding whitelist to Organization Policy.

  1. Go to "IAM and admin"

  2. From the left side menu, choose "Organization policies."

Open Organization policies
Open Organization policies

  1. Search for: "Domain restricted sharing", click on it.

Open the Domain Restricted Sharing policy
Open the Domain Restricted Sharing policy

  1. Click on "Manage Policy"

Manage the organization policy
Manage the organization policy

  1. Under "Rules", you will see one of the existing rules — expand it.

  2. Under "Custom values", there could be some existing values.

  3. Click "ADD VALUE", and add following value without quotes: "principalSet://iam.googleapis.com/organizations/635452545508"

  4. Click on "SET POLICY"

VPC Service Controls.

  1. Go to "Manage VPC Service Controls"

  2. Select the access policy.

  3. Select perimeter item (which is blocking access to services like cloud asset & storage)

  4. Click "EDIT" on the "Ingress policy" section.

Edit the VPC Service Controls ingress policy
Edit the VPC Service Controls ingress policy

  1. Add a new rule using "ADD RULE"

  2. For "FROM attributes of the API client":

  3. For "Identity", choose "Selected identities", add service account id (To obtain the service account ID, please follow these steps Retrieve the Service Account Id )

  4. For "Source", choose "All Sources."

  5. For "TO attributes of GCP services/resources":

  6. For "Project", choose "All projects."

  7. For "All services", choose "All services."

  8. Click on "SAVE"