---
title: Google Cloud Identity and Access Management
description: >-
  Monitor Google Cloud IAM quota usage and service account authentication
  activity.
breadcrumbs: Docs > Integrations > Google Cloud Identity and Access Management
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Google Cloud Identity and Access Management
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}

## Overview{% #overview %}

[Google Cloud Identity and Access Management (IAM)](https://cloud.google.com/iam/docs/overview) lets you manage access control by defining who (identity) has what access (role) for which resource. It provides fine-grained access control to Google Cloud resources and helps you enforce the principle of least privilege.

Enable this integration to monitor IAM quota usage and service account and workload/workforce identity federation authentication activity across your Google Cloud organization.

## Setup{% #setup %}

### Installation{% #installation %}

If you haven't already, set up the [Google Cloud Platform integration](https://docs.datadoghq.com/integrations/google-cloud-platform.md) first. No additional installation is needed to collect google_cloud_iam metrics.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **gcp.iam.quota.accesspolicies.bindings_per_access_policy.exceeded**(count) | Number of attempts to exceed the limit on quota metric iam.googleapis.com/accesspolicies/bindings_per_access_policy. After sampling, data is not visible for up to 150 seconds. |
| **gcp.iam.quota.accesspolicies.bindings_per_access_policy.limit**(gauge)    | Current limit on quota metric iam.googleapis.com/accesspolicies/bindings_per_access_policy.                                                                                     |
| **gcp.iam.quota.accesspolicies.bindings_per_access_policy.usage**(gauge)    | Current usage on quota metric iam.googleapis.com/accesspolicies/bindings_per_access_policy. After sampling, data is not visible for up to 150 seconds.                          |
| **gcp.iam.service_account.authn_events_count**(count)                       | Number of authentication events for a service account.                                                                                                                          |
| **gcp.iam.service_account.key.authn_events_count**(count)                   | Number of authentication events for a service account key.                                                                                                                      |
| **gcp.iam.workforce_identity_federation.count**(count)                       | Count of token exchanges using workforce identity federation.                                                                                                                   |
| **gcp.iam.workload_identity_federation.count**(count)                        | Count of token exchanges using workload identity federation.                                                                                                                    |
| **gcp.iam.workload_identity_federation.key_usage_count**(count)            | Count of times a key is used as part of workload identity federation.                                                                                                           |

### Events{% #events %}

google_cloud_iam does not include any events.

### Service Checks{% #service-checks %}

google_cloud_iam does not include any service checks.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).