Snapshot Permissions

In this article

    To allow Veeam Backup for GCP to create and manage cloud-native snapshots of VM instances, the service account associated with the GCP project managing instances that you want to protect must have the following permissions:

    cloudkms.cryptoKeys.list

    cloudkms.keyRings.list

    compute.addresses.list

    compute.disks.createSnapshot

    compute.disks.get

    compute.disks.list

    compute.firewalls.list

    compute.globalOperations.get

    compute.globalOperations.list

    compute.instances.get

    compute.instances.list

    compute.networks.list

    compute.regionOperations.get

    compute.regions.list

    compute.routes.list

    compute.snapshots.create

    compute.snapshots.delete

    compute.snapshots.get

    compute.snapshots.list

    compute.snapshots.setLabels

    compute.subnetworks.list

    compute.zoneOperations.get

    compute.zones.list

    logging.sinks.create

    logging.sinks.delete

    logging.sinks.get

    logging.sinks.list

    logging.sinks.update

    pubsub.subscriptions.consume

    pubsub.subscriptions.create

    pubsub.subscriptions.delete

    pubsub.subscriptions.get

    pubsub.subscriptions.list

    pubsub.topics.attachSubscription

    pubsub.topics.create

    pubsub.topics.delete

    pubsub.topics.detachSubscription

    pubsub.topics.get

    pubsub.topics.getIamPolicy

    pubsub.topics.list

    pubsub.topics.setIamPolicy

    pubsub.topics.update

    resourcemanager.projects.get

    serviceusage.services.list