GCP

GCP Onboarding Guide

Step-by-step instructions for connecting your Google Cloud projects to Park Your Cloud using a custom IAM role and service account. Choose your method below.

Navigate to Accounts and Start GCP Onboarding

Screenshot: GCP Onboarding — Choose method

Expand

Where you are: The GCP Onboarding screen.
How to get here: Click Accounts in the top navigation bar, then select GCP from the dropdown.

Option	When to use it
Discover automatically	You have a GCP Organization set up. PYC will scan all projects under it automatically via a service account. Best for most users managing multiple projects.
Add manually	You want to add one project at a time, or you do not have organization-wide permissions.

■Select Discover automatically if you manage multiple GCP projects under a GCP Organization (recommended).

■Select Add manually if you only need to add specific projects or have restricted permissions.

■Once selected, click the Continue button at the bottom right.

Configure IAM Role (Step 1 of 3)

Expand

A 3-step wizard on the left sidebar. You are on Step 1: Configure role.

Note

If you have already onboarded some GCP projects before, this flow will not affect them. It only adds new projects not yet onboarded to PYC.

Field	What to enter	Example
IAM Role Name	The name for the custom IAM role PYC will create at your GCP Organization level. You can keep the default or use a custom name.	pycrolecustorg
Organization ID	Your GCP Organization ID. This is a numeric value found in the GCP Console under IAM & Admin > Settings.	000000000000

Note

To find your Organization ID: Go to GCP Console > IAM & Admin > Settings. Your Organization ID is displayed at the top of the page.

1Enter your desired IAM Role Name or keep the default pycrolecustorg.

2Enter your GCP Organization ID.

3Click Save, then click Continue.

Run the Discovery Script (Step 2 of 3)

Screenshot: Run Discovery Script — Step 2 of 3

Expand

A shell script file (pyc_gcp_onboarding_option1.sh). This script creates a custom IAM role at your GCP Organization level and grants the PYC service account permission to assume it, enabling PYC to discover all projects under your organization.

1Click Download or Copy to get the script.

2Open the GCP Console (https://console.cloud.google.com) and click the Cloud Shell icon (>_) in the top navigation bar.

3Once the shell is ready, paste and run the script commands.

4The script will: (1) Create a custom IAM role named pycrolecustorg at your Organization level with the required permissions, and (2) Grant the PYC service account (pyc-scheduler@pyc-project-000000.iam.gserviceaccount.com) permission to use this role across your organization.

5Wait for the status bar at the bottom to show "Verifying org role... this may take up to 60 seconds."

6Once complete, click Verify, then Continue.

Why this is needed

The custom IAM role grants PYC the minimum permissions required to list projects, manage Cloud SQL instances, and start/stop Compute Engine instances across your entire GCP Organization.

Important

You must have Organization Administrator or Owner permissions in GCP to run this script successfully.

View Discovered Projects (Step 3 of 3)

Expand

All 3 steps on the left sidebar are marked Complete. This is the final step of the GCP auto-discovery wizard.

1Click the Verify button at the bottom right.

2PYC will connect to your GCP Organization using the IAM role you set up and load all discovered projects.

3Wait for five minutes until the process is complete, then click Finish.

Note

PYC will display all Google Cloud projects found in your Organization. They will appear in your Accounts list and are ready for scheduling and resource management.