Enabling Access Transparency

Requirements for enabling Access Transparency

Access Transparency is a default security control for every Google Cloud organization.

Configuring Access Transparency using the Google Cloud console

To verify that Access Transparency is enabled for audit purposes:

1. Confirm the enablement checkbox is selected on the Compliance Folder creation page in the Google Cloud console.

or

1. Check your organization-level permissions:

   1. Go to the Identity and Access Management page on the Google Cloud console.

   2. Verify that you have the IAM role Access Transparency Admin (roles/axt.admin) listed in the Role column for your Principal listing under the organization.

   Note: If you don't have this role granted to you, then contact an Organization Adminstrator before you proceed to the next step. An Organization Administrator can also create a custom IAM role for you that contains the axt.labels.get and axt.labels.set permissions. To learn more about granting these permissions, see the IAM documentation on custom roles.

2. Select any Google Cloud organization or project within the organization using the selector menu.

3. Go to the IAM > Settings page.

   1. Verify that Access Transparency is enabled.

What's next

For information about the pricing of Access Transparency, see Pricing.