Enabling Access Transparency

Requirements for enabling Access Transparency

Access Transparency is a default security control for every Google Cloud organization.

To verify that Access Transparency is enabled for audit purposes:

Confirm the enablement checkbox is selected on the Compliance Folder creation page in the Google Cloud console.

Check your organization-level permissions:
1. Go to the Identity and Access Managementpage on the Google Cloud console.
2. Verify that you have the IAM role Access Transparency Admin( roles/axt.admin ) listed in the Rolecolumn for your Principallisting under the organization.
Note: If you don't have this role granted to you, then contact an Organization Adminstratorbefore you proceed to the next step. An Organization Administrator can also create a custom IAM role for you that contains the axt.labels.get and axt.labels.set permissions. To learn more about granting these permissions, see the IAM documentation on custom roles .
Select any Google Cloud organization or project within the organization using the selector menu.
Go to the IAM > Settingspage.
1. Verify that Access Transparency is enabled.

For information about the pricing of Access Transparency, see Pricing .