Skip to main content

Google Cloud Platform (GCP)

Integrate GCP with Torq to enhance Torq automated workflows.

Updated over 2 weeks ago

Google Cloud Platform is a suite of cloud-computing services offered by Google.

Perform these steps in your GCP console to create a service account with organization-wide access. If you want to access only an individual's information, follow this guide.

Torq enables quick and easy integration with GCP, so you can automate anything and everything within moments. Torq's public GCP steps include:

  • Ask a Question

  • Create Space

  • Create User Membership

  • Send Message

  • +2 more...

If you don't see a step you need, you can create your own in various ways, such as using the Send an HTTP Request step or Torq’s Step Builder, and share it across your organization.

Use Google Cloud Platform (GCP) Steps in Torq

Step One: Create a Project in GCP

  1. Open the Google Cloud Console: Navigate to IAM & Admin > Create a Project.

  2. Create a New Project:

    1. Enter a meaningful name for the project.

    2. Select an organization.

    3. Select the location.

  3. Finalize: Click Create.

Step Two: Create a Service Account in the Project

  1. Create a Service Account: Navigate to IAM & Admin > Service Accounts and click Create service account.

  2. Configure the Service Account:

    1. Enter a meaningful name.

    2. Enter a unique ID.

    3. (Optional) Provide a description.

    4. Click Create and continue.

    5. (Optional) Grant the service account access to a project.

    6. (Optional) Grant users or groups access to the service account.

  3. Finalize: Click Done.

Step Three: Add a Private Key to the Service Account

  1. Go to the Service Account's Keys: Locate the service account, and in the Actions column click Actions > Manage keys.

  2. Create a Key: Click Add key > Create new key, select JSON, and then click Create.

  3. Finalize: Save the private key for later—you will use it when creating the GCP integration in Torq.

Step Four: Authorize the Service Account

For Torq to access your Google users' data (impersonation), you need to authorize the service account in your GCP admin console.

  1. Go to the Service Account's Details: Select the Details tab.

  2. Copy the Client ID: Open Advanced settings and under Domain-wide Delegation copy the client ID. You will need it when delegating domain-wide authority to the service account.

  3. Open the Google Admin Console: Click View Google Workspace Admin Console.

  4. Go to API Controls: Navigate to Security > Access and Data control > API controls.

  5. Enable Domain-Wide Delegation: In the Domain wide delegation section, click MANAGE DOMAIN WIDE DELEGATION and then Add new.

  6. Define Permissions:

    1. Paste the Client ID that you copied earlier.

    2. Enter a comma-separated list of scopes you want to use in Torq. See the complete list of OAuth 2.0 scopes for Google APIs.

  7. Finalize: Click AUTHORIZE.

Step Five: Enable APIs

After authorizing access to the desired services, you have to enable the API for each service.

  1. Open the Google Cloud Console: Navigate to APIs & Services > Enabled APIs & services and click Enable APIs and services.

  2. Enable APIs: In the API Library, select any service for which you want to enable the API (e.g. Gmail) and click Enable.

Step Six: Create a GCP Steps Integration in Torq

  1. Navigate to the Integration: Go to Build > Integrations > Steps > Google Cloud Platform (GCP) and click Add Instance.

  2. Configure the Integration:

    1. Enter a meaningful name for the integration.

    2. Upload the private key you generated earlier.

  3. Finalize: Click Add.


FAQs

What level of access is needed to use GCP steps in Torq?

To use Google steps in your workflows, you'll need to create a GCP service account and delegate authority to that account for the services (scopes) you want to use in Torq (e.g. Drive, Vault, Workspace).

What kind of authentication is required?

All Google steps require bearer tokens for authentication. For example, if you want to execute the Google Drive step List all files, you'll first need to execute the Google Drive step Generate a bearer token and use that token as an input parameter for the step List all files.

What is the validity of a bearer token?

A bearer token is valid for one hour.


Templates

Now that you've added your integration check out these specially crafted templates by Torq's security experts. Visit Torq's template library for more.

Did this answer your question?