# Cloud Logging

## Grant Teleskope Access to Cloud Logging

Attach the following roles to the Teleskope service account you created:

* roles/logging.privateLogViewer
* roles/container.clusterViewer

## Terraform

| Variable    | Description                    | Example         |
| ----------- | ------------------------------ | --------------- |
| project\_id | (Required) Your GCP Project ID | "my-project-id" |

```
resource "google_project_iam_member" "teleskope" {
  for_each = toset([
    "roles/logging.privateLogViewer",
    "roles/container.clusterViewer"
  ])
  project = "project_id"
  role    = each.key
  member = "serviceAccount:${google_service_account.teleskope.email}"
}
```