GCP CAM License: Service Accounts Management

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hello All,

I am going through the below documentation regarding Google Workspace:

Please help me understand if CAM License is needed for service accounts ( with active and inactive keys) aggregation and certification?

Thanks

2

Hello Pritish. From the current documentation, it looks like Cloud Governance is needed to aggregate GCP service accounts. The IIQ Supported Features page shows GCP Accounts (Service Account, Domain) as available only with Cloud Governance, and notes that if you already have a CAM license, no additional purchase is required.

For the active and inactive keys, I would treat that separately. I did not find anything in the IIQ Google Workspace documentation showing individual service-account keys or their status being aggregated or certified.

So if the requirement is specifically to certify individual keys, I would suggest confirming that scope with SailPoint or your CSM. For comparison, ISC/SaaS handles service-account credentials separately under NHI Discovery, which requires Agentic Fabric.

Ref: IIQ - Supported Features | ISC/SaaS - Supported Features