[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2024-12-22。"],[[["\u003cp\u003eAfter completing the initial Google Cloud setup, you can further customize your configuration by managing users and groups, which can be done manually or by federating with an identity provider like Active Directory.\u003c/p\u003e\n"],["\u003cp\u003eTo effectively monitor your Cloud Billing account, implement cost management best practices, export detailed billing data to BigQuery, and define budgets with alert thresholds for spending.\u003c/p\u003e\n"],["\u003cp\u003eYou can tailor your network configuration after the initial deployment by creating and connecting service projects, and setting up secondary IP ranges for VPC-native clusters if you're using GKE.\u003c/p\u003e\n"],["\u003cp\u003eBeyond the initial logging configuration, you can query, view, and analyze logs using Cloud Logging, keeping in mind that there is a free monthly allotment, and costs may increase.\u003c/p\u003e\n"],["\u003cp\u003eWhen ready to build your architecture, Google Cloud offers prebuilt solutions through Jump Start guides, and there are resources available for migrating data and applications from other clouds or on-premises environments.\u003c/p\u003e\n"]]],[],null,["# Extend your initial setup and build your architecture\n\nAfter you complete [Google Cloud Setup](/docs/enterprise/cloud-setup), you can\nextend your initial configuration and build your architecture.\n\nExtend your initial setup\n-------------------------\n\nGoogle Cloud Setup helps you create and deploy an initial configuration. To\nfurther customize your configuration to meet your organization's unique needs,\nyou can perform the following optional procedures at any time after you complete\nyour initial setup.\n\n### Manage users and groups\n\nTo manage users and groups beyond the initial administrators you created, do the\nfollowing:\n\n- To manually create additional users and groups, see the following.\n\n - [Create a group in your organization](https://support.google.com/cloudidentity/answer/33343).\n - [Add or invite users to a group](https://support.google.com/cloudidentity/answer/6191469).\n- If you use an identity provider such as Active Directory,\n Azure AD, Okta, or Ping Identity, you can federate your provider into\n Google Cloud. For details see the following:\n\n - [Reference architectures: using an external IdP](/architecture/identity/reference-architectures#using_an_external_idp).\n - To automatically provision users and enable single sign-on, see [Federate Cloud Identity with Active Directory](/architecture/identity/federating-gcp-with-active-directory-introduction).\n - To sync Active Directory users and groups to Google Cloud, see [Directory Sync](https://support.google.com/a/topic/10343447).\n- To automate identity administration tasks, see [Google Workspace Admin SDK](https://developers.google.com/admin-sdk/).\n\n### Monitor your billing account\n\nTo monitor costs after you set up your Cloud Billing account, we recommend\nthat you implement the following for each account:\n\n- For an overview of cost management best practices, see [Cost optimization](/architecture/framework/cost-optimization).\n- Export detailed Cloud Billing data (such as usage, cost estimates, and pricing data) automatically throughout the day. For more information, see [Export Cloud Billing data exports to BigQuery](/billing/docs/how-to/export-data-bigquery).\n- Define budgets to generate alerts when spending reaches thresholds. For more information, see [Create, edit, or delete budgets and budget alerts](/billing/docs/how-to/budgets).\n\n### Customize your network\n\nAfter you deploy your configuration, you can customize your initial network\nsettings by doing the following:\n\n- To create and connect service projects, see [Attach service projects](/vpc/docs/provisioning-shared-vpc#create-shared).\n\n- If you create GKE instances in your projects, configure secondary [IP address ranges for VPC-native clusters](/kubernetes-engine/docs/concepts/alias-ips#cluster_sizing).\n\n### Maintain and analyze logs\n\nAfter you create your initial logging configuration, do the following:\n\n- To query, view, and analyze logs, see [Query and view logs overview](/logging/docs/log-analytics).\n\n- Cloud Logging includes a free monthly allotment. You might incur\n additional costs as your resource use increases. For more\n information, see [Cloud Logging pricing summary](/stackdriver/pricing#logging-pricing-summary).\n\n### Give users access to support\n\nTo configure user access to support services, see [Access control with IAM](/support/docs/access-control).\n\nBuild your Google Cloud architecture\n------------------------------------\n\nWhen you are ready to experiment and build your Google Cloud architecture,\nsee the following:\n\n- To quickly deploy and learn from prebuilt solutions, see [Jump Start Solution guides](/architecture/all-jss-guides).\n\n- To migrate your data and applications from other clouds and on-premises to\n Google Cloud, see [What is Google Cloud Migration Center?](/migration-center/docs/migration-center-overview)\n\n- For workload migration best practices, see [Migrate to Google Cloud](/architecture/migration-to-gcp-getting-started)."]]
