Cloud Map

Cloud Map draws each Google Cloud project in the selected connection scope. Choose One project, A folder, or Whole organization when you connect Google Cloud. A legacy connection asks you to choose its scope on the account card.

Projects and lines

Each project has its own box. Networks are global inside their project, with resources arranged by region. A line between projects appears only when configuration and network rules prove the path. If a referenced project is outside your scope or a read fails, Cloud Map shows an unknown instead of a line.

Use the project filter to focus on one project. The account picker still shows one entry for the connection.

Google Cloud read roles

Grant these Cloud Map roles to the connected identity at the chosen scope. For a folder or organization, the grant applies to projects beneath it. Other capabilities retain project grants and read one project. Cloud Map reads Cloud Asset configuration and the effective firewall for each network.

• Project scope: enter a project ID such as my-project-id.
• Folder scope: enter folders/123.
• Organization scope: enter organizations/456.

See Permissions reference for the full connection role list and use Check permissions on the account card to inspect the selected scope.