Google Cloud Platform

​

Before you begin

• GCP project access — make sure you are logged in to the Google Cloud project you want to connect.
• Your Leanly tenant ID — find this in your Leanly dashboard under Settings.

​

1. Create the operator service account

1

Open service accounts

In the Google Cloud Console, navigate to IAM & Admin, then Service Accounts.

2

Create a service account

Click Create service account and enter a friendly name (e.g. LeanlyOperator), then click Create and continue.

3

Assign the operator role

Search for and select the Service Account Admin role from the dropdown, then click Continue.

This role allows Leanly to create and manage workload-specific service accounts in your project on your behalf.

4

Add Leanly as a service account user

Under Grant users access to this service account, add the following as a Service Account User.

leanly-devopsengineer@leanlyhq.iam.gserviceaccount.com

Then click Done.

Is your project part of a Google Cloud Organization? Organization-wide policies may restrict which external identities can access your service accounts. If your organization enforces the iam.allowedPolicyMemberDomains constraint, you need to add an exception for Leanly’s directory ID: C03w2fsp3. See Google’s documentation for details.

5

Copy the service account email

Copy the email address of the service account you just created — you’ll need it in the next step.

​

2. Connect the service account to Leanly