Google Cloud checklist · Wiv onboarding checklist

Before you start

0/4

A BigQuery Cloud Billing export exists with Detailed usage cost data
Wiv prefers detailed tables (gcp_billing_export_resource_v1_*) over standard ones (gcp_billing_export_v1_*).
You can create integrations in Wiv
Your Google user holds the recommended roles
Add Wiv to the Domain restricted sharing policy on the host project
Organizations created after May 3, 2024 enforce constraints/iam.allowedPolicyMemberDomains by default, which blocks the impersonation grant to Wiv's platform service account.

0/6

In Wiv, go to Integrations → GCP → New GCP Integration
Connect: click "Grant Read Access" and authorize Wiv in Google
The grant is read-oriented: cloud metadata, least-privilege roles, no service account keys downloaded.
Configure: select the Organization, confirm the host project and click Apply
Wiv suggests wiv-host-<organization>. If you cannot create projects, pick an existing project. Then click Next.
Provision: wait for every phase to finish
Scope verification, host project, API enablement, service account, organization roles, impersonation grant (IAM can take a minute), billing scan.
Confirm the BigQuery billing export Wiv found
Billing project ID, dataset name and billing table name. If no export is found, click Retry Scan or enter the three values yourself.
Complete: "Your GCP environment is connected"
Click View Cloud Inventory to open the GCP integrations list.

0/4

The new integration appears under Integrations → GCP
If it is missing, open Integrations → GCP again or refresh the page.
In Google Cloud, confirm the service account and its roles
Wizard: host project plus wiv-readonly-… with viewer roles at the organization. Script: wiv-sa with the roles listed in IAM & Admin.
Review what each role is used forOptional
Remove the Domain restricted sharing exception if your security policy requires itOptional