What does the GCP project need for Applane?

Who

Cloud or Platform admin with API enablement and project IAM permissions

Time

5 minutes to check

Prepare a project in your Workspace organisation for the builder’s Google sign-in and Vertex AI calls. Use the checklist below before running a setup script or infrastructure deployment. Applane’s backend is not granted access to the project.

Property	Why	How to check
It sits inside your Google Workspace organisation	The OAuth consent screen can only be Internal for a project that belongs to an organisation. Internal is what removes Google’s app verification.	gcloud projects describe <GCP_PROJECT_ID> --format='value(parent.type,parent.id)' prints organization or folder. A project with no parent must be moved or replaced.
Billing is linked	Vertex AI refuses every request on a project without a billing account, even inside the free tier.	gcloud billing projects describe <GCP_PROJECT_ID> --format='value(billingEnabled)' prints True.
Your account can enable APIs and update project IAM	Enabling APIs and granting IAM need serviceusage.services.enable and resourcemanager.projects.setIamPolicy.	gcloud projects get-iam-policy <GCP_PROJECT_ID> --flatten=bindings --filter="bindings.members:$(gcloud config get-value account)" --format='value(bindings.role)'

An existing project is fine. The setup tools only add what is missing: five APIs, one IAM grant, an optional budget alert. Existing workloads are retained; review the planned API and IAM additions before applying them. If a platform team already runs Vertex AI in a project, that project is the natural choice.

What it costs

Google bills Gemini tokens to this project at list price. Applane adds no AI usage fee and never sees the bill.

Estimate spend from a small pilot with the models your company will allow. Usage varies with the number of builders, app complexity and iteration count. The budget alert is the control; the default it creates is 50 in the billing account’s currency per month, with alerts at 50%, 90% and 100%.

Apps Script, Sheets, Drive and Docs have no per-call charge for Workspace users. What Vertex AI bills, and how the builder’s context caching cuts it, is on Model cost.

What you will create

Resource	What
Five enabled APIs	script, aiplatform, sheets, drive, docs (.googleapis.com). The five APIs
One IAM binding	roles/aiplatform.user to the builders group. IAM
One budget (optional)	Alerts only; nothing is cut off. Budget alerts
One consent screen	Internal, your own app name. OAuth consent screen
One OAuth client	Web application, two redirect URIs. OAuth client

Direct builder access needs no service-account key. Infrastructure Manager, if selected, uses its own deployment service account and state storage. Start with Set up the project.