After You Install

To start working with Veeam Backup for Google Cloud, you must perform the initial configuration of the backup appliance:

In a web browser, navigate to the Veeam Backup for Google Cloud web address.

The address consists of a public IPv4 address or an FQDN of the backup appliance. Note that the website is available over HTTPS only.

Important

Internet Explorer is not supported. To access Veeam Backup for Google Cloud, use Microsoft Edge (latest version), Mozilla Firefox (latest version) or Google Chrome (latest version).

Read and accept the Veeam license agreement, Veeam licensing policy, license agreements of the 3rd party components and license agreements of the required 3rd party software. If you reject the terms and conditions, you will not be able to continue installation.
In the Instance ID field, specify the unique numeric identifier of the VM instance running Veeam Backup for Google Cloud to prove that you are the owner of this VM instance.

To obtain the ID assigned to the VM instance upon creation, you can either look it up on the Instances page in the Google Cloud Console, or send a query to the metadata server API using the gcloud command-line tool. To learn how to retrieve instance metadata, see Google Cloud documentation.

Create the Default Administrator account whose credentials you will use for your first login to Veeam Backup for Google Cloud.

Note

To increase the security of the Default Administrator account, it is recommended that you enable multi-factor authentication (MFA) for the account after you first log in to Veeam Backup for Google Cloud. To learn how to enable MFA, see Enabling Multi-Factor Authentication.

Log in to Veeam Backup for Google Cloud with the credentials of the Default Administrator account, as described in section Accessing Veeam Backup for Google Cloud.

You will receive a warning in the notification area notifying that the service account created during product installation does not have the permissions required to perform data protection tasks for the project to which the backup appliance belongs. You can grant the missing permissions to the service account immediately, or later when configuring Veeam Backup for Google Cloud as described in Managing Projects and Folders.

To grant the permissions immediately, do the following:

Click the link in the notification area.

Alternatively, you can switch to the Configuration page and navigate to Infrastructure > Projects and Folders.

Select the project and click Edit.
In the Edit Project and Folders wizard, at the Permissions step, click Download script. Veeam Backup for Google Cloud will generate a gcloud script — run this script using the gcloud command-line tool to assign all the necessary permissions to the default service account.

The account under which you run the script must have the permissions both to get and set project IAM policies and to create custom IAM roles (for example, it can have the iam.securityAdmin and iam.roleAdmin roles assigned). To learn what permissions and roles are required to create custom roles in IAM, see Google Cloud documentation.

Important

If you plan to use the default service account to back up and restore Google Cloud instances connected to Shared VPC networks, and to launch worker instances in Shared VPC networks, the service account must also be assigned either the compute.networkUser role for the whole Shared VPC host project, or the compute.networkViewer role for the whole host project plus compute.networkUser for specific subnets in the host project.

To learn how to provide access to Shared VPC networks, see Google Cloud documentation.

At the Summary step of the wizard, review configuration information and click Finish to confirm the changes. Note that it may take up to 5–10 minutes for Google Cloud to apply the changes to the account.

Tip

To specify granular permissions for the service account, select the Specify granular roles check box at the Service Account step of the wizard, and then choose operations that Veeam Backup for Google Cloud will be able to perform using the service account with the resources managed by the project in which the backup appliance is deployed.