Skip to main content

Integration through the Google Cloud Console

Overview​

To monitor Google Cloud Platform (GCP) resources in Motadata ObserveOps (formerly known as AIOps), you need to retrieve the following credentials from the Google Cloud Console:

  • Client ID
  • Client Secret

You also need to enable the specific GCP service APIs you want to monitor. This guide walks you through each step.

note

Save the Client Secret immediately after creating the OAuth client — Google will not display it again after you close the dialog. You can also download the JSON file once the Client Secret is created.

Prerequisites​

  • You have access to a Google Cloud project with sufficient permissions to create OAuth credentials and enable APIs.
  • The ObserveOps server is installed and reachable.
danger

Your application URL must be publicly accessible before you submit for branding verification. Google validates the authorized domain during the verification review. If the URL is not publicly reachable, Google rejects the verification request and you must resubmit after making it accessible.

  1. Log in to the Google Cloud Console.

  2. Open the Navigation Menu using the top-left hamburger icon.

  3. Go to APIs & Services and select OAuth Consent Screen.

This displays the OAuth Overview page.

info

If consent is already enabled for your project, start from Step 2 after navigating to the OAuth Overview page.

  1. Click Get Started to configure the consent screen.

  2. Under the App Information section, enter the App Name for which you are asking for consent and the User Support Email where users can contact you with questions about this consent. Click Next.

  1. Select External from the Audience list and click Next.

  1. Provide the Email Address to which Google will send notifications about any changes to your project. Click Next, then click Finish to complete the steps.

  1. Click Create to enable the consent screen.

Step 2: Add Test User​

  1. In the left-side panel under Google Auth Platform, click Audience.

  2. Under the Test Users section, click Add Users.

  3. Enter the email addresses to use for testing.

Step 3: Configure Data Access Scopes​

  1. In the left-side panel under Google Auth Platform, select Data Access.

  2. Review the listed scopes. The following scopes are required for ObserveOps to collect GCP monitoring data:

ScopePurpose
../auth/cloud-platformFull access to Google Cloud services
../auth/cloudplatformprojects.readonlyView Cloud Platform projects

  1. Click Add or remove scopes if any required scope is missing, and add it.

Step 4: Create an OAuth Client ID​

  1. Open the Navigation Menu using the top-left hamburger icon.

  2. Go to APIs & Services and select Credentials.

  1. On the Credentials page, click + Create credentials in the top bar. From the list, select OAuth client ID.

  2. In the Create OAuth client ID form, set Application type to Web application.

  1. Give the client a name.

  2. In the Authorized JavaScript origins section, provide the URL of your ObserveOps application domain — for example, {Motadata_Application_Domain}.

note

Provide the domain only. An IP address will not work here.

  1. In the Authorized redirect URIs section, provide the Redirect URL you copied while creating the credential profile in ObserveOps. Click Create.

Google displays the OAuth client created dialog with your Client ID and Client Secret.

danger

Copy and securely save both values before closing this dialog. The Client Secret cannot be retrieved again — without it, syncing GCP data with ObserveOps is not possible.

  1. Click OK to close the dialog.

Step 5: Enable Required GCP Service APIs​

ObserveOps can only collect metrics for GCP services whose APIs are enabled in your project. Enable each service API before ObserveOps can discover and monitor it.

  1. Open the Navigation Menu, go to APIs & Services, and select Enabled APIs & services.

  1. Click + Enable APIs and services.

  2. Search for each service you want to monitor and click Enable.

The following APIs are commonly required:

APIMonitors
Cloud Monitoring APIGCP metrics and alerting
Compute Engine APIVM instances
Cloud Filestore APIManaged file storage
Cloud Resource Manager APIProject and resource hierarchy
Cloud Storage APIObject storage buckets
  1. Repeat for each additional service you want ObserveOps to monitor.

Moving from Test to Production​

When you first set up a GCP OAuth app, it runs in Testing mode. This limits access to 100 test users. To use ObserveOps with real production accounts, you must publish the app and complete Google's verification process.

Step 6: Publish the App to Production​

  1. Open the Navigation Menu, go to APIs & Services, and select Credentials.

  1. In the left-side panel under Google Auth Platform, click Audience.

  1. Under Publishing status, the app shows Testing. Click Publish app.

  1. Confirm the prompt. The publishing status changes to In production. Google displays a banner asking you to submit the app for verification.

Step 7: Complete Branding Verification​

  1. In the left-side panel, click Verification Center.

  1. Click View branding to open the Branding page.

  2. Fill in the App information section — App Name and User Support Email.

  1. Fill in the App domain section — provide your Application home page, Privacy Policy link, and Terms of Service link.

  1. Under Authorized domains, add your domain (for example, motadata.com). Add your developer contact email address, then click Save.

danger

The app name and the authorized domain must match. For example, if the domain is motadata.com, the app name must be motadata. Your application URL must also be publicly accessible — Google rejects verification requests for URLs that are not publicly reachable.

  1. Return to Verification Center and submit for branding verification. Google reviews your submission and sends a confirmation. This process can take up to 4 to 6 weeks.

Step 8: Complete Data Access Verification​

After branding verification passes, you must also verify data access for any sensitive or restricted scopes your app uses.

  1. In the left-side panel, click Data Access.

  2. Under Your Restricted Scopes, confirm the scopes your app requests are listed.

  3. Under Demo video: how will the scopes be used?, paste a YouTube video URL that demonstrates how your application uses the requested scopes.

  1. Click Save. Google reviews the video and marks data access as verified.
note

Record your demo video in a staging environment or using a test project. Do not deploy unverified scopes to your production traffic. The unverified app screen will appear in your video — this is expected.

Step 9: Attach a Billing Account​

Your GCP project must have a billing account linked before production use.

  1. In the search bar at the top of the Google Cloud Console, search for Linked account or navigate to Billing.

  1. If the project shows This project has no billing account, click Link a billing account and select or create a billing account.

Step 10: Assign IAM Roles​

  1. Open the Navigation Menu, go to IAM & Admin, and select IAM.

  2. Click Grant access.

  3. In the Add principals field, enter the email address of the user or service account.

  4. Assign the Browser role and either the Editor or Viewer role, then click Save.

note

Your project must be attached to a billing account before IAM roles take effect for production API calls.

Summary​

You now have all the credentials and API access required to integrate Google Cloud with Motadata ObserveOps:

ItemWhere to Find It
Client IDAPIs & Services → Credentials → OAuth client → Client ID
Client SecretAPIs & Services → Credentials → OAuth client → Client Secret (save at creation)
Enabled APIsAPIs & Services → Enabled APIs & services

Use the Client ID and Client Secret when creating a credential profile for Google Cloud in ObserveOps. Refer to Adding Cloud Devices for Monitoring to continue.