Snapshot Permissions

To allow Veeam Backup for Google Cloud to create and manage cloud-native snapshots of Google Cloud instances, the service account associated with the Google Cloud project managing instances that you want to protect must have the following permissions.

VM Snapshot Permissions

compute.addresses.list

compute.firewalls.list

compute.regions.list

compute.disks.list

compute.disks.createSnapshot

compute.disks.get

compute.instances.get

compute.instances.list

compute.networks.list

compute.projects.get

compute.snapshots.create

compute.snapshots.delete

compute.snapshots.get

compute.snapshots.list

compute.subnetworks.list

compute.routes.list

compute.zones.list

compute.globalOperations.list

compute.globalOperations.get

compute.zoneOperations.get

compute.regionOperations.get

resourcemanager.projects.get

compute.snapshots.setLabels

logging.sinks.create

logging.sinks.delete

logging.sinks.get

logging.sinks.list

logging.sinks.update

pubsub.subscriptions.create

pubsub.subscriptions.delete

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.subscriptions.consume

pubsub.topics.attachSubscription

pubsub.topics.create

pubsub.topics.delete

pubsub.topics.detachSubscription

pubsub.topics.get

pubsub.topics.getIamPolicy

pubsub.topics.list

pubsub.topics.setIamPolicy

pubsub.topics.update

cloudkms.keyRings.list

cloudkms.cryptoKeys.list

serviceusage.services.list

Cloud SQL Snapshot Permissions

cloudsql.backupRuns.create

cloudsql.backupRuns.delete

cloudsql.backupRuns.get

cloudsql.backupRuns.list

cloudsql.databases.list

cloudsql.instances.get

cloudsql.instances.list

compute.regions.list

compute.zones.list

logging.sinks.create

logging.sinks.delete

logging.sinks.get

logging.sinks.get

logging.sinks.list

pubsub.subscriptions.consume

pubsub.subscriptions.create

pubsub.subscriptions.delete

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.subscriptions.list

pubsub.topics.attachSubscription

pubsub.topics.create

pubsub.topics.delete

pubsub.topics.detachSubscription

pubsub.topics.get

pubsub.topics.getIamPolicy

pubsub.topics.list

pubsub.topics.setIamPolicy

serviceusage.services.list

compute.projects.get