GCP Dashboard
Dashboard summarizes the security posture of the scanned GCP environments in the selected scan.
Risk Pane (GCP Dashboard)
This Risk Pane summarizes key risk metrics from the scan, including the overall Risk and Exposure Scores, Tier 0 Identities, Dangerous Paths, Shadow Admins, and severity levels (Critical to Info). It breaks down risks by:
MITRE ATT&CK Tactics (e.g., Persistence, Privilege Escalation)
Tags (e.g., Identity Governance, Account Security)
Impacts (e.g., Privileged Role Assignment, Service Account Ownership Abuse)
GCP Entity Types (e.g., GCPUser, GCPGroup, GCPServiceAccount, GCPServiceAccountKey, GCPOrganization, GCPFolder, GCPProject, GCPDevice, GCPRole)
This layout helps quickly identify high-risk areas and prioritize remediation actions within GCP environments.
The Tier 0 Identities card is shown when the scan policy enables the Tier0 Analysis module for GCP. The Tier Analysis Statistics and Top Choke Points sections below the entity cards are described on the Dashboard page.
Risk Breakdown by Tags, Impacts and Entity Types
Risk Breakdown by Tags: Risk scores based on Tags.
Risk Breakdown by Impacts: Risk scores based on Impacts.
Risk Breakdown by Entity Types: Risk scores based on GCP Entity Types.
GCP Entity Pane
The header of each card shows the total number of objects of that type, for example Users (5), and the Structure card shows each count next to its name.
Users Table
Shadow Admin Users
The number of GCP user accounts that have administrative privileges indirectly, without being explicitly assigned an admin role.
Privileged Users
The number of privileged GCP user accounts.
Risky Users
The number of GCP user accounts that have a risk score greater than 50.
Service Accounts Table
Inactive Service Accounts
The number of GCP service accounts that have not been used or active in a defined period.
Privileged Service Accounts
The number of privileged GCP service accounts.
Risky Service Accounts
The number of GCP service accounts that have a risk score greater than 50.
Groups Table
Empty Groups
The number of GCP groups that have no members.
Privileged Groups
The number of privileged GCP groups.
Risky Groups
The number of GCP groups that have a risk score greater than 50.
Roles Table
Custom Roles
The number of non-default roles created manually in the GCP environment.
Privileged Roles
The number of privileged GCP roles.
Structure
The Structure section provides an overview of the GCP organizational hierarchy and resource layout discovered during the scan.
Organizations
The top-level GCP organization node. Represents the root of the GCP resource hierarchy.
Folders
Folders used to group projects and apply policies at an intermediate level within the organization.
Projects
Individual GCP projects discovered within the organization or folders.
Devices
Devices registered in the environment and associated with users or organizational policies.
Service Account Keys Table
Disabled Keys
The number of GCP service account keys that are currently disabled.
Privileged Keys
The number of GCP service account keys associated with privileged service accounts.
Last updated
Was this helpful?