| Info |
|---|
The article explains how to grant Cloudaware additional permissions, such as to Google Organizations or Google Billing accounts, and create a custom role for backups and tagging. Ensure you have the necessary permissions in Google Cloud. |
...
For Cloudaware to collect Google billing accounts, assign the role Billing Account Viewer to the service account* that has access to billing accounts in question.
Log in to the Google console. Go to 'Billing' → 'MY BILLING ACCOUNTS'.
Select the billing account by checking the check box. Click ADD PRINCIPAL on the right to manage permissions.
Select the role Billing Account Viewer → SAVE.
...
To use backups and tagging, create a custom role and assign it to the Cloudaware service account:
Log in to the Google console. Go to 'IAM & admin' → 'Roles' → +CREATE ROLE.
Set a meaningful name and description for the custom role, e.g. Cloudaware Custom Role. Set 'Role launch stage' as General Availability.
Click +ADD PERMISSIONS. Select the following permissions:
For backups |
|---|
For labels (tags)
|
For labels (tags) |
|
Click CREATE.
Assign the custom role to the service account: 'IAM & admin' → IAM→ select the service account → click the pencil icon to edit principal → ADD ANOTHER ROLE → Custom → Cloudaware Custom Role → SAVE.
...