Google Cloud | Atomicwork

Google Cloud: Overview and setup

Manage cloud infrastructure and automate resource provisioning with the Google Cloud integration.

Connect Google Cloud Platform (GCP) to Atomicwork to manage cloud infrastructure, automate resource provisioning, and integrate GCP operations into your IT workflows.

Usecases

By connecting Google Cloud, your teams can:

Manage cloud resources: Interact with GCP services — Compute Engine, Cloud Storage, Cloud SQL, and more — directly from Atomicwork workflows.
Automate infrastructure provisioning: Provision and deprovision cloud resources as part of onboarding, project setup, or environment management workflows.
Query billing and usage data: Pull cost and usage information from GCP for reporting and chargeback workflows.
Custom operations: Execute any GCP API call for workflows beyond standard use cases.

Permissions

To connect Google Cloud to Atomicwork, you need:

Org admin access in Atomicwork
Admin access to your Google Cloud project with permission to create OAuth credentials

The integration authenticates via OAuth 2.0 and requests the following scopes during authorization:

Permission	Purpose
`https://www.googleapis.com/auth/cloud-platform`	Full access to Google Cloud Platform resources — required for managing GCP services like Compute Engine, Cloud Storage, and Cloud SQL.
`https://www.googleapis.com/auth/admin.directory.user`	Read access to Google Workspace directory users — required if the integration includes user lookup or sync operations.

Setup

Go to Settings > Enterprise integrations > App store > Google Cloud.
Click Connect to initiate the OAuth flow.
Sign in with your Google account and authorize the requested permissions.
Once authorized, the integration is active.

[!NOTE] Important: The Google account used for authorization must have the appropriate IAM roles in GCP to perform the operations you plan to automate. The OAuth scopes grant API access, but the account’s IAM permissions determine what actions are actually allowed.

Supported workflow actions

Action	Description
Call API	Make a generic API call to any Google Cloud Platform endpoint. Use this for all GCP resource management, monitoring, billing, and infrastructure operations.

[!NOTE] Note: Google Cloud currently supports the Call API action, which gives you access to the full GCP REST API. Refer to the Google Cloud API documentation for available endpoints and operations.

Troubleshoot common issues

Error	Cause	Resolution
Failed to get token	Token acquisition failed — client credentials may be incorrect or the redirect URI doesn’t match.	Verify the OAuth credentials in your Google Cloud project and re-initiate the connection.
Token refresh failure	The refresh token has expired or been revoked.	Re-authenticate the integration from Settings > Enterprise integrations > App store > Google Cloud.
Permission denied (403)	The authorized Google account lacks the required IAM roles for the operation.	Assign the appropriate IAM roles to the account in Google Cloud Console > IAM & Admin.