# Permission visibility, GCP IAM import, and storage lifecycle remediation

> When ZopNight can't read part of your cloud, the page that needs it now says so: Resources, Schedules, Recommendations, and Cost Reports each show a banner naming the missing access and what it would unlock, and a new View Permissions screen brings every permission ZopNight checks into one place, tracked per account, per region, and per cloud. GCP IAM import goes end-to-end, one-click storage-lifecycle remediation lands across all three clouds, and ZopDay gets a live Observability tab per service.

Source: https://zop.dev/changelog/v1-14-0
Published: 2026-05-29 · Tags: zopnight, zopday, permissions, iam, gcp, auto-remediation

---

See exactly what cloud access is missing.

## New

- ZopNight: per-page permission banners on Resources, Schedules, Recommendations, and Cost Reports name the specific access that's missing and the resources it would unlock
- ZopNight: a View Permissions screen brings every permission ZopNight checks into one place, grouped by feature and tracked per account, per region, and per cloud, so a partial setup is visible instead of rolled up to one status
- ZopNight: GCP IAM import end-to-end (mirroring AWS): one Cloud Asset Inventory call returns the project's IAM policy, service accounts are filtered out, and Google Group members can optionally be resolved via Cloud Identity
- ZopNight: GCP onboarding gets a dedicated BigQuery cost-export step, also offered as a one-click fix when GCP cost data is missing after onboarding
- ZopNight: one-click storage-lifecycle remediation across all three clouds: move GCS buckets, S3 buckets, and Azure storage accounts to colder tiers at 30 and 90 days. Transitions are lossless (no delete), with an Adopt / Replace toggle and full Restore
- ZopDay: a live Observability tab on the service drawer: replica count, restarts, per-replica CPU / memory, HPA targets, scoped events, and a multi-replica log button, with progressive loading per card