Cloud Logging

Grant Teleskope Access to Cloud Logging

For organization discovery, grant the following roles to the Teleskope connector service account at the organization level. For manual project enrollment, grant them on each enrolled project:

• roles/logging.privateLogViewer

• roles/container.clusterViewer

See GCP organization discovery for the organization-level Terraform example and the complete connector role list.

Also grant the shared project-dispatch custom role from GCP organization discovery. It contains resourcemanager.projects.get and compute.regions.list.

roles/container.clusterViewer includes container.clusters.list, and roles/logging.privateLogViewer includes logging.logEntries.list for private log entries.