---
title: "Google Cloud Platform (GCP)"
slug: "google-cloud-platform-gcp-v6-7"
updated: 2026-03-06T20:44:05Z
published: 2026-04-03T16:41:09Z
canonical: "support.appgate.com/google-cloud-platform-gcp-v6-7"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Cloud Platform (GCP)

You can specify multiple GCP resolvers to resolve instances from multiple projects with proper IAM role configuration.

For GCP name resolvers to work, the project will need compute.googleapis.com enabled.

Gateways will need *Read Only* **Cloud Platform Cloud API access scopes** enabled.

![Cloud Platform access is enabled among various API access scopes listed.](https://cdn.us.document360.io/e7482ce5-acfa-4c3b-b76c-b6c32472644a/Images/Documentation/ag63-google_api.png?sv=2026-02-06&spr=https&st=2026-10-26T22%3A49%3A01Z&se=2026-10-26T23%3A49%3A01Z&sr=c&sp=r&sig=vrwSkND1dcC39GdlY1b9Jj4YYHjxbul5gmZzE9LBX7I%3D)

## How to configure IAM Roles

Create a service account for the project (Project A) where the Gateway is going to be deployed, and copy the email-id of the service account.

Now go to other project (Project B).

- Navigate to the roles page.
  - Create new role with permissions > compute.instances.list, compute.forwardingRules.list & resourcemanager.projects.get
  - Give it an appropriate name (e.g., ComputeInstancesReadRole)
- Navigate to "IAM & admin" > "IAM" page.
  - Click the "Add" button.
  - In the "New members" field, paste the email-id of the service account (it should look like a strange email address).
  - Assign the custom role (ComputeInstancesReadRole) that you just created.

Now you can use the [special name resolver](/v1/docs/resource-names-v6-7) syntax to define hosts in your entitlements.