# Google Cloud Platform \(GCP\)

[Google Cloud Platform](https://cloud.google.com) is a suite of cloud-computing services offered by Google.

Perform these steps in your GCP console to create a service account with *organization*-*wide* access. If you want to access only an *individual's* information, [follow this guide](https://kb.torq.io/en/articles/9140106-oauth-2-0#h_f0eedf1d84).

Torq enables quick and easy integration with GCP, so you can automate anything and everything within moments. Torq's public GCP steps include:

- Ask a Question

- Create Space

- Create User Membership

- Send Message

If you don't see a step you need, you can create your own in various ways, such as using the [Send an HTTP Request](https://kb.torq.io/en/articles/9183207-creating-custom-steps-in-torq-automate-anything#h_5d7b3ce25e) step or Torq’s [Step Builder](https://kb.torq.io/en/articles/9183207-creating-custom-steps-in-torq-automate-anything#h_aa89bad36e), and [share it](https://kb.torq.io/en/articles/9140014-export-and-import-workflows-in-torq#h_b7d82ce021) across your organization.

# **Use Google Cloud Platform (GCP) steps in Torq**

## **Create a project in GCP**

1. **Open the Google Cloud console:** Navigate to **IAM & Admin** > **Create a Project.**

2. **Create a project:**

  1. Enter a meaningful name for the project.

  2. Select an organization.

  3. Select the location.

  4. Click **Create**.

![](https://downloads.intercomcdn.com/i/o/eomhaz2o/1476488183/ec8decec4b48c26d69d89e48897f/Screenshot+2025-04-15+at+9_32_33.png?expires=1793573100&signature=f20e09695fe90e18a9a061547e5b58b1f5d8834855cbac959084480e57fe1d27&req=dSQgEM12lYBXWvMW1HO4zVcqKllRGJkW7DYxlyS2RVOQPMEt9D3Ajr1YmBj2%0AITuvAyUg2LOwzK%2FRbOk%3D%0A)

## **Create a service account in the project**

1. **Create a service account:** Navigate to **IAM & Admin** > **Service Accounts** and click **Create service account**.

2. **Configure the service account:**

  1. Enter a meaningful name.

  2. Enter a unique ID.

  3. (Optional) Provide a description.

  4. Click **Create and continue**.

  5. (Optional) Grant the service account access to a project.

  6. (Optional) Grant users or groups access to the service account.

  7. Click **Done**.

![](https://downloads.intercomcdn.com/i/o/eomhaz2o/1476524332/26afbf5df203906a93b2f8b1f4a3/Screenshot+2025-04-15+at+9_51_01+copy.png?expires=1793573100&signature=e34a02c503896a982fc3dc28dfb583a9ffe1ee17a212dfb6b954a67e51f72237&req=dSQgEMx8mYJcW%2FMW1HO4zRdiNbMB7j1DL%2B%2B7dct43bOjNrVmUEiFnRipLXIa%0AVEi5meT2lnZ4zDYq%2FwY%3D%0A)

## **Add a private key to the service account**

1. **Go to the service account's keys:** Locate the service account, and in the Actions column click **Actions** > **Manage keys**.

2. **Create a key:** Click **Add key** > **Create new key**, select **JSON**, and then click **Create**.

3. **Copy the key:** Save the private key for later—you will use it when creating the GCP integration in Torq.

![](https://downloads.intercomcdn.com/i/o/eomhaz2o/1476703457/90df5d47a3e09405005a0d33e248/Screenshot+2025-04-15+at+12_19_24+copy.png?expires=1793573100&signature=8c86af56cb8d55bfcf236333b03b72f4205f738405218f384114e55046da6700&req=dSQgEM5%2BnoVaXvMW1HO4zSlClGeTt7oxFqjPtnUOzGnm%2F4A0msvjVQgMXYsJ%0AqbJLskajFXOEDrKLPtA%3D%0A)

## **Authorize the service account**

For Torq to access your Google users' data (impersonation), you need to authorize the service account in your GCP admin console.

1. **Go to the service account's details:** Select the **Details** tab.

2. **Copy the client ID:** Open **Advanced settings** and under Domain-wide Delegation copy the client ID. You will need it when delegating domain-wide authority to the service account.

3. **Open the Google Admin console:** Click **View Google Workspace Admin Console**.

4. **Go to API controls:** Navigate to **Security** > **Access and Data control** > **API controls**.

5. **Enable domain-wide delegation:** In the Domain wide delegation section, click **MANAGE DOMAIN WIDE DELEGATION** and then **Add new**.

6. **Define permissions:**

  1. Paste the client ID that you copied earlier.

  2. Enter a comma-separated list of scopes you want to use in Torq. See the complete list of [OAuth 2.0 scopes for Google APIs](https://developers.google.com/identity/protocols/oauth2/scopes).

  3. Click **AUTHORIZE**.

## **Enable APIs**

After authorizing access to the desired services, you have to enable the API for each service.

1. **Open the Google Cloud console:** Navigate to **APIs & Services** > **Enabled APIs & services** and click **Enable APIs and services**.

2. **Enable APIs:** In the API Library, select any service for which you want to enable the API (e.g. Gmail) and click **Enable**.

## **Create a GCP steps integration in Torq**

1. **Navigate to the integration:** Go to **Build > Integrations > Steps > Google Cloud Platform (GCP)** and click **Add Instance**.

2. **Configure the integration:**

  1. Enter a meaningful name for the integration.

  2. Upload the private key you generated [earlier](#h_757be5e688).

  3. Click **Add**.

![](https://downloads.intercomcdn.com/i/o/eomhaz2o/1476756210/a70914c48b1d46f10a1c69c6b66a/Screenshot+2025-04-15+at+12_50_44.png?expires=1793573100&signature=3b124bb8cf02889b63367f8d050985bd0cdc21fc81cd311425da38472399674b&req=dSQgEM57m4NeWfMW1HO4zWxLhXZWKBegZO3xPhc%2BNJvaR%2BRIWSfViGMH%2FI8R%0AiPynnc8CwduPgwfc3Ew%3D%0A)

---

# **FAQs**

*What level of access is needed to use GCP steps in Torq?*

To use Google steps in your workflows, you'll need to create a GCP service account and delegate authority to that account for the services (scopes) you want to use in Torq (e.g. Drive, Vault, Workspace).

*What kind of authentication is required?*

All Google steps require bearer tokens for authentication. For example, if you want to execute the Google Drive step **List all files**, you'll first need to execute the Google Drive step **Generate a bearer token** and use that token as an input parameter for the step **List all files**.

*What is the validity of a bearer token?*

A bearer token is valid for one hour.

---

# **Templates**

Now that you've added your integration check out these specially crafted templates by Torq's security experts. Visit Torq's template library for [more](https://app.torq.io/templates?).

- [Monitor and Handle Gmail Mailbox for Phishing (Gmail)](https://app.torq.io/templates?id=540d80d7-1458-40a5-a4ae-d887d731dff0)

​