> Source: [sk144815](https://support.checkpoint.com/results/sk/sk144815)

# sk144815 - Onboard a Google Cloud Platform subscription using the CloudGuard API

| Property | Value |
|----------|-------|
| Solution ID | sk144815 |
| Date Created | 2019-01-16 |
| Last Modified | 2023-03-28 |
| Technical Level | General |
| Products | Cloud Firewall |
| Versions | R82.10, R81.20, R82 |

## Solution

This article describes how to onboard a GCP account to CloudGuard using the CloudGuard REST API.

The process uses the *GoogleCloudAccount* resource. For onboarding, you need details about your GCP account, which you can obtain from the GCP console or API.

Prerequisites
-------------

### CloudGuard information

* API Keys for your CloudGuard account (see [Creating an API Key](https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/CloudGuard-PM-Admin-Guide/Default.htm#cshid=API_V2))

### GCP subscription information

* Service Account Key for a CloudGuard role for your account. This key is used by CloudGuard to access your GCP account and onboard it.
* Service Account permissions block (JSON) for the service account.

### Set up the GCP subscription

The Google subscription must have a service account defined, *CloudGuard-Connection*, with the Viewer role set.

Request
-------

POST https://api.dome9.com/v2/GoogleCloudAccount

    {
     "name": "GCP-account",
     "serviceAccountCredentials": {},
      "organizationalUnitId": "00000000-0000-0000-0000-000000000000",
      "gsuiteUser": "Gsuite_user",
      "domainName": "Domain_name"
    }

### Parameters

**name** - the name of the subscription as it will appear in CloudGuard

**serviceAccountCredentials** - the service account permissions block (including the service account key) generated on the GCP console

Response
--------

The response includes the id for the subscription in CloudGuard.

    {
      "id": "********-****-****-****-************",
      "name": "GCP-account",
      "projectId": "**********",
      "creationDate": "2022-10-11T14:03:37Z",
      "organizationalUnitId": "00000000-0000-0000-0000-000000000000",
      "organizationalUnitPath": "OU_path",
      "organizationalUnitName": "OU_username",
      "gsuite": {
        "gsuiteUser": "Gsuite_user",
        "domainName": "Domain_name"
      },
      "vendor": "google",
      "projectNumber": "Project_number"
    }

See also
--------

[Google Cloud Account](https://docs.cloudguard.dome9.com/reference/google-cloud-account) (CloudGuard API reference guide)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content