Cortex Cloud: GCP Onboarding"Permission Denied Error"

Cortex Cloud: GCP Onboarding"Permission Denied Error"

137
Created On 10/17/25 18:09 PM - Last Modified 12/31/25 20:12 PM


Symptom


  • Organization-level onboarding is not ingesting the projects.
  • No assets ingested after onboarding is complete.
  • When runing the Query: config timeframe = 30d | dataset = cloud_health_auditing
  • The message "Permission denied on resource project <organization id>" is seen
  • The message of "API disabled" is also seen for many capabilities. Example below.
    • Cloud Asset API is disabled. Enable it in order to collect data.
    • Cloud Translation API is disabled. Enable it in order to collect data.


Environment


  • Google Cloud Platform
  • Cotrex Cloud


Cause


Cloud Resource Manager API on GCP is disabled



Resolution


Enable the Cloud Resource Manager API.

  1. Navigate to GCP console.
  2. Search for API and Services.
  3. Go to Library.
  4. Search for Cloud Resource Manager API.
  5. Enable it.


Additional Information


Link to directly navigate to Cloud Resource Manager API tab.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000kAOUKA2&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail