Snapshot Permissions

In this article

    To allow Veeam Backup for Google Cloud to create and manage cloud-native snapshots of Google Cloud instances, the service account associated with the Google Cloud project managing instances that you want to protect must have the following permissions.

    VM Snapshot Permissions

    compute.addresses.list

    compute.firewalls.list

    compute.regions.list

    compute.disks.list

    compute.disks.createSnapshot

    compute.disks.get

    compute.instances.get

    compute.instances.list

    compute.networks.list

    compute.projects.get

    compute.snapshots.create

    compute.snapshots.delete

    compute.snapshots.get

    compute.snapshots.list

    compute.subnetworks.list

    compute.routes.list

    compute.zones.list

    compute.globalOperations.list

    compute.globalOperations.get

    compute.zoneOperations.get

    compute.regionOperations.get

    resourcemanager.projects.get

    compute.snapshots.setLabels

    logging.sinks.create

    logging.sinks.delete

    logging.sinks.get

    logging.sinks.list

    logging.sinks.update

    pubsub.subscriptions.create

    pubsub.subscriptions.delete

    pubsub.subscriptions.get

    pubsub.subscriptions.list

    pubsub.subscriptions.consume

    pubsub.topics.attachSubscription

    pubsub.topics.create

    pubsub.topics.delete

    pubsub.topics.detachSubscription

    pubsub.topics.get

    pubsub.topics.getIamPolicy

    pubsub.topics.list

    pubsub.topics.setIamPolicy

    pubsub.topics.update

    cloudkms.keyRings.list

    cloudkms.cryptoKeys.list

    serviceusage.services.list

    Cloud SQL Snapshot Permissions

    cloudsql.backupRuns.create

    cloudsql.backupRuns.delete

    cloudsql.backupRuns.get

    cloudsql.backupRuns.list

    cloudsql.databases.list

    cloudsql.instances.get

    cloudsql.instances.list

    compute.regions.list

    compute.zones.list

    logging.sinks.create

    logging.sinks.delete

    logging.sinks.get

    logging.sinks.get

    logging.sinks.list

    pubsub.subscriptions.consume

    pubsub.subscriptions.create

    pubsub.subscriptions.delete

    pubsub.subscriptions.get

    pubsub.subscriptions.list

    pubsub.subscriptions.list

    pubsub.topics.attachSubscription

    pubsub.topics.create

    pubsub.topics.delete

    pubsub.topics.detachSubscription

    pubsub.topics.get

    pubsub.topics.getIamPolicy

    pubsub.topics.list

    pubsub.topics.setIamPolicy

    serviceusage.services.list

    compute.projects.get