Generate or download an Access Transparency report

You can generate and download Access Transparency reports using access insights.

Before you begin

  • To generate and download Access Transparency reports, enable Access Approval for your organization. To enable Access Approval in an audit-only mode, select the Transparency enrollment mode for your policy.

Required roles

To get the permission that you need to generate and download Access Transparency reports, ask your administrator to grant you the Access Approval Viewer (roles/accessapproval.viewer) IAM role on your organization. For more information about granting roles, see Manage access to projects, folders, and organizations.

This predefined role contains the accessapproval.settings.get permission, which is required to generate and download Access Transparency reports.

You might also be able to get this permission with custom roles or other predefined roles.

Generate an Access Transparency report

  1. In the Google Cloud console, go to the Access Approval page.

    Go to Access Approval

  2. On the Home tab, select the start date, the end date, the products, and the reason type to include in your report.

  3. Click Queue export.

Download an Access Transparency report

You can download a generated report from the Reports tab for up to 30 days.

  1. In the Google Cloud console, go to the Access Approval page.

    Go to Access Approval

  2. Click the Reports tab.

  3. Locate the report that you want to download, and then click Download.

What's next