# GCP CAM License: Service Accounts Management

**URL:** <https://developer.sailpoint.com/discuss/t/gcp-cam-license-service-accounts-management/223723>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, connectors\
**Created:** [September 24, 2026, 2:18pm UTC](https://developer.sailpoint.com/discuss/t/gcp-cam-license-service-accounts-management/223723 "2026-09-24T14:18:20Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pritishmhrn](https://avatars.discourse-cdn.com/v4/letter/p/9fc29f/32.png) [@pritishmhrn](https://developer.sailpoint.com/discuss/u/pritishmhrn)\
**Post date:** [September 24, 2026, 2:18pm UTC](https://developer.sailpoint.com/discuss/t/gcp-cam-license-service-accounts-management/223723/1 "2026-09-24T14:18:20Z")

</div>

Hello All,

I am going through the below documentation regarding Google Workspace:

> **[Supported Features](https://documentation.sailpoint.com/connectors/identityiq/google_workspace/help/integrating_g_suite/supported_features.html)**
>
> SailPoint Connectors Documentation

Please help me understand if CAM License is needed for service accounts ( with active and inactive keys) aggregation and certification?

Thanks

---

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [September 25, 2026, 2:46am UTC](https://developer.sailpoint.com/discuss/t/gcp-cam-license-service-accounts-management/223723/2 "2026-09-25T02:46:57Z")

</div>

Hello Pritish. From the current documentation, it looks like Cloud Governance is needed to aggregate GCP service accounts. The IIQ Supported Features page shows GCP Accounts (Service Account, Domain) as available only with Cloud Governance, and notes that if you already have a CAM license, no additional purchase is required.

For the active and inactive keys, I would treat that separately. I did not find anything in the IIQ Google Workspace documentation showing individual service-account keys or their status being aggregated or certified.

So if the requirement is specifically to certify individual keys, I would suggest confirming that scope with SailPoint or your CSM. For comparison, ISC/SaaS handles service-account credentials separately under NHI Discovery, which requires Agentic Fabric.

Ref: [IIQ - Supported Features](https://documentation.sailpoint.com/connectors/identityiq/google_workspace/help/integrating_g_suite/supported_features.html) | [ISC/SaaS - Supported Features](https://documentation.sailpoint.com/connectors/saas/googleworkspace/help/saas_connectivity/google_workspace/supported_features.html)