JSM: built-in way to sync GCP IM roles to Assets

Question

Hello,

Our client is using Google Cloud Platform (GCP) and has multiple infrastructure resources where employees have different access levels defined through GCP IAM roles and permissions. They are looking for a centralized way to see who has access to which resources and, if possible, manage or review those accesses through Jira.

We considered using Atlassian Assets (CMDB) in Jira Service Management as a potential solution. However, we were not able to find a built-in way to synchronize or import GCP IAM roles and permissions into Assets.

Could you please advise whether this scenario can be implemented using Atlassian tools or recommended integrations? Alternatively, please let us know if this use case typically requires a custom integration or a solution outside of the Atlassian ecosystem.

Thank you,
Yana

Prabhu Palanisamy _Onward_ · Answer

Hi @ymykhaylenko - We are considering adding GCP import to OnLink. Today we support several HR applications, Identity Providers, Device Management and AWS to Assets. I'd love to connect and understand your use case better. If you'd be open, we can connect. Thank you.

Marc -Devoteam- · Answer

Hi @ymykhaylenko

You could look at Assets Data Manager can provide you with options to achieve this.

https://support.atlassian.com/assets/docs/connect-cleanse-reconcile-data-with-assets-data-manager/

Arkadiusz Wroblewski · Answer

Hello @ymykhaylenko

I do not think there is a built-in native way to sync GCP IAM roles directly into Assets in JSM Cloud.

The realistic approach here would be a custom integration or scheduled import. In other words: pull the role data from GCP, transform it into the structure you need, and then bring it into Assets through one of the supported import methods or via API.

So I would not spend too much time looking for a hidden native toggle for this. This looks more like an integration project than a standard Assets feature.

If your goal is only to get the data visible in Assets, that is definitely possible. But if your goal is a true built-in sync for GCP IAM roles specifically, I would not expect that today and try to look for External Apps.