🔌Onboarding GCP project onto Economize

After signing up with Economize to onboard your GCP project, select the Connect GCP option when choosing your cloud provider, and follow these steps:

Step 1: Add GCP configuration information

Add Project ID

Enter the project ID that you wish to initially onboard onto Economize. We recommend you to enter the project ID of the main GCP project.

Add BigQuery dataset ID

You can use an existing BigQuery dataset or create a new one dedicated specifically for importing cloud billing data by following these instructions.

In the GCP console, navigate to BigQuery, and in the Dataset info screen of BigQuery, observe the value on the Data set ID line and copy and paste it into the provided field during the onboarding process.

Step 2: Enable cloud billing export to the BigQuery dataset

GCP provides an option to export your billing data to the BigQuery dataset. This consists of details regarding your usage, and pricing data.

1. Click the hamburger menu at the top left of the GCP console, and select Billing.

2. In the left Billing navigation menu, select Billing Export.

3. For both Standard usage cost and Detailed usage cost, click EDIT SETTINGS to enable them.

4. Configure the following settings:

   • From the Projects list, select the project you set up to contain your billing data.

   • For Dataset, select the dataset that you set up to contain your exported Cloud Billing data.

5. Click on SAVE.

6. Once both exports are enabled they will indicate the same as follows:

Step 3: Validate service account credentials

Economize uses a service account to integrate with your GCP account. You can choose to provide access either by using the Service account managed by Economize or by Bringing your own service account.

You will need to provide the service account with the required permissions as mentioned in the next two steps.

Service account managed by Economize

When using the service account managed by Economize, you will need to copy the service account generated at the time of the onboarding process within the application and use it to provide the permission as listed in steps 4 and 5.

Bring your own service account

When you bring your own service account you need to upload your service account's key, which Economize securely stores.

First, you need to create a service account, grant it the relevant roles, and generate a key. Make sure you create a JSON key, not P12. Once the service account and key have been created, download the key to your machine and paste it into the provided field.

Economize then parses the key, and if it's valid, you can continue forward to provide the permission as listed in steps 4 and 5.

Follow these steps to create a service account and generate a JSON key:

1. Go to the Service Accounts page in the console and click on Create Service Account.

1. Provide a name to the service account and click Done to create the service account.

2. Note down the service account email as it will be used in the next steps 4 & 5 when granting it with required permissions.

3. Navigate to the service account that you have just created, and select the three vertical dots next to it, and click on the Manage Keys button.

4. Click on the Add Key button in the KEYS section.

1. Select the JSON key type and click on the Create button.

1. The JSON key will be downloaded to your local system. Copy this key and paste it into the below-provided field during the onboarding process.

Step 4: Grant the viewer permission to the service account

Navigate to the IAM console, and complete the steps below to grant the service account permission to access project resources.

1. At the top of the IAM console, select the project whose ID you entered in the first step.

2. Configure the permission as follows:

   • In the center of the page, under Permissions for project "My Project XYZ", click + GRANT ACCESS.

   • In the New principals field, under Add principals, paste the value of the service account based on your selected access method in Step 3.

   • In the Role field, under Assign roles, search for and select Viewer.

   
3. Click on SAVE.

Step 5: Assign BigQuery Data Editor role to the service account

Go to BigQuery, and complete the following steps to permit the service account to access the BigQuery dataset.

1. At the top of the BigQuery console, ensure the project containing the BigQuery dataset whose ID you entered in the first step is selected, then navigate to the Explorer panel, and select your project to expand it.

2. Configure the permission as follows:

   • Select the three vertical dots next to the dataset name, then click Share.

   • On the Share permissions panel that appears on the right, click + ADD PRINCIPAL.

   • In the New principals field, under Add principals, paste the value of the service account based on your selected access method in Step 3.

   • In the Role field, under Assign roles, search for and select BigQuery Data Editor.

   
3. Click on SAVE.

SUCCESS

It can take up to 24–48 hours for the data to fully propagate if the linked billing dataset was created recently.

So, you might not be able to use all the features right away but you can still utilize the Recommendations to start optimizing your costs.