The Veeam Cookbook Series
A simple step by step no frills approach to achieving your goal
Recipe: Adding a new Service Account and Google Cloud Project
Expected deliverables:
A Service Account added to the Veeam for Google Cloud instance, with proper privileges for Data Protection tasks in a specific Google Cloud Project.
Time to complete: 5 minutes
Ingredients:
- Access to Veeam Backup for Google Cloud using a browser.
- Appliance Administrator credentials
- A Google Cloud Service Account with permissions both to get and set project IAM policies and to create custom IAM roles.
- If you will create a new Service Account by signing in with Google, then you first need to comple the Register Applicaton step.
Before you start:
Once you log in to Veeam for GCP appliance the first time You will immediately receive a warning notifying that the service account used to install Veeam Backup for Google Cloud does not have the permissions required to perform data protection tasks for the project specified during the product installation.
Assumptions:
You have an existing Veeam Backup for Google Cloud deployment.
Method:
- In a web browser, navigate to the Veeam Backup for Google Cloud web address. Also you can access from VBR Console, from Backup Infrastructure > Managed Server, righ-click to the Veeam for Google Cloud Appliance, and then click in Open Console
- Click in Configuration in the upper-right corner, then navigate to Infrastructure > Service Accounts and click in Add
- In the Service Account step, click in Add existing account or Create new account
- If you choose to create a new account:
- In the Project step, specify the ID of a project in which the new service account will be created. Then click in Sign in with Google to authenticate with an account with enough privileges to create a service account. This step requires that the Application Registration process has been completed beforehand.
- In the Account Details step, specify an ID for the new service account.
- Click in Next and then monitor the progress in the Creation Log Step
- If you choose to add an existing account:
- In the Account Details step,specify the email address generated for the service account during the account creation in Google Cloud console.
- Click in Next and Finish to complete the process.
Links to Resources: