...
Before you can ingest your Google Cloud data into your Chronicle instance, you must complete the following steps:
Contact your Chronicle representative Adaptive MxDR on-boarding engineerand obtain the one-time access code you need to ingest your GCP telemetry.
Grant the following IAM roles required for you to access the Chronicle section:
Chronicle Service Admin (
roles/chroniclesm.admin): IAM role for performing all activities.Chronicle Service Viewer (
roles/chroniclesm.viewer): IAM role to only view the state of ingestion.Security Center Admin Editor (
roles/securitycenter.adminEditor): Required to enable the ingestion of Cloud Asset Metadata.
...