---
title: "Supported GCP services"
description: "The GCP services Guardian can scan, and the permissions each needs."
product: "Guardian"
edition: "Classic"
type: "reference"
url: "https://docs.cloudhouse.com/guardian/classic/inventory/add-nodes/supported-cloud-services/supported-gcp-services/"
---
# Supported GCP services

Guardian supports a range of GCP services. For more information on how to add a GCP service node in Guardian, see [Google Cloud Platform (GCP) Node](https://docs.cloudhouse.com/guardian/classic/inventory/add-nodes/add-a-single-node/agentless/google-cloud-platform-gcp-node/index.md).

Applies to: `Guardian Classic`

## BigQuery

BigQuery is a fully managed enterprise data warehouse that helps you manage and analyse your data with built-in features like machine learning, geospatial analysis, and business intelligence. For more information, see
[BigQuery overview](https://cloud.google.com/bigquery/docs/introduction) in the Google Cloud Guide.

### Required BigQuery permissions

The following code snippet describes the permissions required for the BigQuery service.

```
BigQuery Data Viewer
```

## Cloud DNS

Cloud DNS is a high-performance, resilient, global Domain Name System (DNS) service that publishes your domain names to the global DNS in a cost-effective way. For more information, see
[Cloud DNS overview](https://cloud.google.com/dns/docs/overview) in the Google Cloud Guide.

### Required Cloud DNS permissions

The following code snippet describes the permissions required for the Cloud DNS service.

```
DNS Reader
```

## Cloud KMS

Cloud KMS is a REST API that can use a key to encrypt, decrypt, or sign data such as secrets for storage. High global availability. For more information, see [Cloud Key Management Service documentation](https://cloud.google.com/kms/docs).

### Required Cloud KMS permissions

The following code snippet describes the permissions required for the Cloud KMS service.

```
Cloud KMS CryptoKey Public Key Viewer, Cloud KMS Viewer
```

## Cloud logging

Cloud Logging is a fully managed service that allows you to store, search, analyse, monitor, and alert on logging data and events from Google Cloud and Amazon Web Services. For more information, see [Cloud Logging documentation](https://cloud.google.com/logging/docs).

### Required Cloud logging permissions

The following code snippet describes the permissions required for the Cloud Logging service.

```
Logs Viewer
```

## Cloud SQL

Cloud SQL is a fully-managed database service that helps you set up, maintain, manage, and administer your relational databases on Google Cloud Platform. For more information, see [Cloud SQL documentation](https://cloud.google.com/sql/docs).

### Required CloudSQL permissions

The following code snippet describes the permissions required for the Cloud SQL
service.

```
Cloud SQL Viewer
```

## Compute Engine (GCE)

Compute Engine is a customisable compute service that lets you create and run virtual machines on Google’s infrastructure. For more information, see [Compute Engine documentation](https://cloud.google.com/compute/docs).

### Required Compute Engine permissions

The following code snippet describes the permissions required for the GCE service.

```
Compute Engine Viewer
```

## IAM Google Cloud

IAM is Google’s identity management solution for Google Cloud Platform. For more information, see [Identity and Access Management (IAM)](https://cloud.google.com/iam) in the Google Cloud Product overview.

### Required IAM permissions

The following code snippet describes the permissions required for the IAM service.

```
Security Reviewer
```

## Kubernetes Engine (GKE)

Google Kubernetes Engine (GKE) provides a managed environment for deploying, managing, and scaling your containerized applications using Google infrastructure. For more information, see [Google Kubernetes Engine documentation](https://cloud.google.com/kubernetes-engine/docs).

### Required GKE permissions

The following code snippet describes the permissions required for the GKE service.

```
Compute Engine Viewer, Kubernetes Engine Viewer
```

## Cloud storage (Buckets)

Cloud Storage is a service for storing your objects in Google Cloud. For more information, see [Cloud Storage documentation](https://cloud.google.com/storage/docs).

### Required Cloud storage permissions

The following code snippet describes the permissions required for the Cloud Storage service.

```
Storage Object Viewer
```