Connect Google Cloud Platform services to New Relic

To start receiving Google Cloud Platform (GCP) data with New Relic GCP integrations, connect your Google project to New Relic infrastructure monitoring. If you don't have one already, create a New Relic account. It's free, forever.

Requirements

These are the requirements for the authorization:

GCP integration requirements	Comments
Monitoring	In the GCP project API & Services Library settings, you must enable Google Stackdriver Monitoring API.
Authorization	For service account authorization (recommended): A user with Project IAM Admin role is needed to add the service account ID as a member in your GCP project. In the GCP project IAM & admin, the service account must have the Project Viewer role and the Service Usage Consumer role or, alternatively, a custom role.
Authorization	For user account authorization: The New Relic user that will integrate the GCP project must have a Google account and must be able to view the GCP project that New Relic will monitor. In the GCP project IAM & admin, the user must have the Project Viewer role. Please note that this authorization method will not allow New Relic to collect labels and other inventory attributes that can be useful for narrowing down your NRQL queries, dashboards and alerts. You can migrate the authorization method from user account to service account from the Manage services link in New Relic's user interface.
Project name	As part of the online setup process, you must identify `Project name` of the projects you want to monitor with New Relic. The UI workflow automatically lists active projects you can select.
Permissions (only for user account authorization)	New Relic requires a specific set of read-only permissions exclusively; this means that, for certain integrations, only partial inventory data will be available. Keep in mind that New Relic doesn't inherit your Google account's permissions and therefore is not authorized to perform any changes in the project. For more information about the API permissions that New Relic uses, see the Google documentation about scopes.

Authorization options

Integrating your GCP project with New Relic requires you to authorize New Relic to fetch monitoring data from your GCP project. You can choose between two authorization methods: Service accounts or User accounts.

The service account authorization is recommended.

If you authorize New Relic to fetch data through a service account, we will call your GCP project APIs using a service account ID and its associated public/private key pair.

New Relic manages a specific Google service account for your New Relic account; you do not need to create it or manage the associated private key. Just add the service account ID as a member with viewing permissions in your project.

If your organization uses a domain restriction constraint, you will have to update the policy to allow the New Relic domain, C02x1gp26.

This authorization method is recommended, especially if your GCP project is managed by a team. It also guarantees that New Relic will collect labels and inventory attributes whenever possible.

If you authorize New Relic to fetch data through a user account, New Relic will access your GCP project monitoring data on behalf of a particular Google user.

The authorization process is achieved through an OAuth workflow, which redirects you from the New Relic UI to a Google authorization interface. However, since the authorization is linked to a particular Google user, this method is not recommended for GCP projects that are managed by large teams.

Connect GCP to New Relic infrastructure monitoring

To connect your Google account to New Relic with user account authorization:

Go to one.newrelic.com > Infrastructure > GCP. At the top of Infrastructure's Google Cloud Services integrations page, select Add a GCP account.
Choose Authorization Method: Select either Authorize a Service Account or Authorize a User Account, and follow the instructions in the UI to authorize New Relic.
Add projects: Select the projects that you want New Relic to receive data from.
Select services: From the list of available services for your GCP account, select the individual services you want New Relic to receive data from, or select all of the services.
Tip
These services will be enabled for all of the projects that you selected in the previous step. Once the setup process is finished, you can fine-tune the services that you want monitored for each project individually.
To complete the setup process, select Finish.

If you see API authentication errors, follow the troubleshooting procedures.

Explore app data in New Relic

After you authorize New Relic to integrate one or more of your Google project's services, New Relic starts monitoring your GCP data at regular polling intervals. After a few minutes, data will appear in the New Relic UI. To find and use your data, including links to dashboards and alert settings, go to one.newrelic.com > Infrastructure > GCP.

Link multiple Google projects

For your convenience, the setup process allows you to select more than one project at a time.

After the first setup, if you need to monitor additional GCP projects with New Relic, you can repeat the procedure to connect your GCP services as many times as you need.

Unlink your GCP integrations

You can disable any of your GCP integrations any time and still keep your Google project connected to New Relic.

If you want to...	Do this
Disable a GCP service monitoring	To disconnect individual GCP services but keep the integration with New Relic for other GCP services in your Google account: Go to one.newrelic.com > Infrastructure > GCP and select Manage services. From your GCP account page, make changes to the checkbox options for available services and select Save changes.
Unlink your project monitoring	To uninstall all of your GCP services completely from New Relic Integrations, unlink your Google account: Go to one.newrelic.com > Infrastructure > GCP and select Manage services. From your GCP account page, select Unlink account and select Save changes.
Clean your GCP Projects after unlinking New Relic	To clean your GCP project after unlinking, follow these steps if you were using a service account: Open the GCP IAM Console. Select the project you want to unlink from New Relic and click Open. Select the service account that is used by New Relic. Click the Remove icon. Or follow these steps if you were using a user account: Open your Google user account settings. Open the Apps with access to your account section. Choose New Relic application. Choose Remove Access.

If you want to...

Do this

Disable a GCP service monitoring

To disconnect individual GCP services but keep the integration with New Relic for other GCP services in your Google account:

Go to one.newrelic.com > Infrastructure > GCP and select Manage services.
From your GCP account page, make changes to the checkbox options for available services and select Save changes.

Unlink your project monitoring

To uninstall all of your GCP services completely from New Relic Integrations, unlink your Google account:

Go to one.newrelic.com > Infrastructure > GCP and select Manage services.
From your GCP account page, select Unlink account and select Save changes.

Clean your GCP Projects after unlinking New Relic

To clean your GCP project after unlinking, follow these steps if you were using a service account:

Open the GCP IAM Console.
Select the project you want to unlink from New Relic and click Open.
Select the service account that is used by New Relic.
Click the Remove icon.
Or follow these steps if you were using a user account:
Open your Google user account settings.
Open the Apps with access to your account section.
Choose New Relic application.
Choose Remove Access.

For more help

If you need more help, check out these support and learning resources:

Browse the Explorers Hub to get help from the community and join in discussions.
Find answers on our sites and learn how to use our support portal.
Run New Relic Diagnostics, our troubleshooting tool for Linux, Windows, and macOS.
Review New Relic's and and documentation.