Enabling Access Transparency

Requirements for enabling Access Transparency

Access Transparency is a default security control for every Google Cloud organization.

Configuring Access Transparency using the Google Cloud console

To verify that Access Transparency is enabled for audit purposes on any resource level within your organization:

1. 1. Verify that you have the IAM role Access Approval Viewer (roles/accessapproval.viewer) or Access Transparency Admin (roles/axt.admin).
2. Go to Security > Access Approval in the Google Cloud console.
3. Confirm that Access Transparency is enabled on the Home tab.

Note: If Access Transparency is disabled, the Access Approval UI may be inaccessible until Access Transparency is re-enabled.

or

1. Check the Organization-Level Access Transparency IAM Settings Page.

   1. Go to the Identity and Access Management page on the Google Cloud console.

   2. Verify that you have the IAM role Access Transparency Admin (roles/axt.admin) listed in the Role column for your Principal listing under the organization.

2. Select any Google Cloud organization or project within the organization using the selector menu.

3. Go to the IAM > Settings page.

   1. Verify that Access Transparency is enabled.

What's next

For information about the pricing of Access Transparency, see Pricing.