The names for some Assured Workload control packages are changing. For information about the name change, see Control package renaming notice .

Enabling Access Transparency

This page explains how you can enable and disable Access Transparency for your Google Cloud organization.

Requirements for enabling Access Transparency

To enable Access Transparency for a Google Cloud project , the project must reside in an organization .

To enable Access Transparency, do the following:

Check your organization-level permissions:
1. Go to the Identity and Access Managementpage on the Google Cloud console.
  
  Go to Identity and Access Management
2. If you're prompted, select the Google Cloud organization in the selector menu.
3. Verify that you have the IAM role Access Transparency Admin( roles/axt.admin ) listed in the Rolecolumn for your Principallisting under the organization. Roles added to the project level do not grant sufficient permissions to enable Access Transparency.
Note: If you don't have this role granted to you, then contact an Organization Adminstratorbefore you proceed to the next step. An Organization Administrator can also create a custom IAM role for you that contains the axt.labels.get and axt.labels.set permissions. To learn more about granting these permissions, see the IAM documentation on custom roles .
Select any Google Cloud organization or project within the organization using the selector menu.

If Access Transparency is configured on a Google Cloud project, Access Transparency is enabled for the entire organization.
Go to the IAM & Admin> Settingspage.
1. Click the Enable Access Transparencybutton.

To disable Access Transparency, contact Google Cloud Support .

For information about the pricing of Access Transparency, see Pricing .