> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hiperai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Vertex AI

> Connect Google Vertex AI so SecureAI can inventory agents, models, service accounts, IAM, usage, and cost

# Google Vertex AI

Connect your Google Cloud project so SecureAI can inventory Vertex AI agents, endpoints, and models, along with the service accounts, IAM bindings, audit logs, usage, and billing that surround them.

## What SecureAI imports

* **Vertex AI agents, endpoints, and models**
* **NHIs** — service accounts, service-account keys, and API keys (revocable — see [NHI Inventory](/discovery/nhi-inventory))
* **IAM** role bindings
* **Cloud Audit Logs**
* **Requests, tokens, and cost** for the last 30 days (actual from BigQuery billing export, or estimated)

## Prerequisites

* A **service account** with a JSON key, granted read roles on the project:
  * `roles/aiplatform.viewer`
  * `roles/monitoring.viewer`
  * `roles/iam.securityReviewer`
  * `roles/logging.viewer`
  * `roles/billing.viewer`
  * BigQuery roles (e.g. `roles/bigquery.dataViewer`, `roles/bigquery.jobUser`) if you use billing export for **actual** cost.
  * *(Optional)* key/service-account admin roles if you want SecureAI to revoke identities at the source.

## Credentials

| Field                | Required | Description                                                                    |
| -------------------- | -------- | ------------------------------------------------------------------------------ |
| `projectId`          | Yes      | GCP project ID.                                                                |
| `location`           | Yes      | Vertex region (e.g. `us-central1`).                                            |
| `serviceAccountJson` | Yes      | The service-account key JSON. Encrypted at rest.                               |
| `billingExportTable` | No       | BigQuery table for actual billing (e.g. `dataset.gcp_billing_export_v1_XXXX`). |
| `billingProjectId`   | No       | Project that hosts the billing export, if different.                           |

### Where to get them

1. In the [Google Cloud console](https://console.cloud.google.com/), go to **IAM & Admin → Service Accounts → Create service account**.
2. Grant the roles listed above.
3. Under **Keys → Add key → JSON**, download the key file.
4. Paste the **entire** JSON into the `serviceAccountJson` field.

## Connect

1. **Admin → Integrations → Cloud → Google Vertex AI → Connect.**
2. Enter project, location, and the service-account JSON (plus optional billing fields).
3. **Test**, then **Save**.
4. **Sync**.

## Verify

Open [Cloud Sensors](/discovery/cloud-sensors) for discovered agents/endpoints/models and [NHI Inventory](/discovery/nhi-inventory) for service accounts and keys. Insights show IAM bindings, usage, and cost.

## Revocation

GCP service accounts, SA keys, and API keys are **revocable** from [NHI Inventory](/discovery/nhi-inventory) when the connector has the optional key/SA admin roles.

## Related

* [Cloud AI Providers Overview](/integrations/cloud/overview)
* [Google Workspace SSO](/iam/google-workspace)
* [NHI Inventory](/discovery/nhi-inventory)