| Info |
|---|
The article explains how to grant Cloudaware additional permissions, such as to Google Organizations or Google Billing accounts, and create a custom role for backups and tagging. Ensure you have the necessary permissions in Google Cloud. |
| Table of Contents | ||
|---|---|---|
|
Configure Google Billing Account permissions
...
Google Organizations
For Cloudaware to collectGoogle Organizations and related data, assign the role Viewer to the service account added to Cloudaware. The following permissions are required:
Organization Role Viewer
Folder Viewer
Organization Viewer
Organization Policy Viewer
Project Viewer
Click SAVE.
Assign the Project Viewer role at the organization level for Cloudaware to add and collect Google Projects within a Google Organization automatically.
Google billing accounts
For Cloudaware to collect Google billing accounts, assign the role Billing Account Viewer to the service account* that has access to billing accounts in question.
1. Go to Billing.
...
Log in to the Google console. Go to 'Billing' → 'MY BILLING ACCOUNTS'.
Select the billing account by checking the check box. Click ADD PRINCIPAL on the right to manage permissions.
...
Select
...
the role Billing Account Viewer →
...
SAVE.
...
*Note that the Google service account should be added to Cloudaware.
...
See the guide
Custom role for backups or tagging
| Anchor | ||||
|---|---|---|---|---|
|
A custom role is necessary if you are going to use backups and labels.
Go to IAM & admin, select "Roles" and click +Create Role.
...
Add the name and the description of the custom role. To use backups and tagging, create a custom role and assign it to the Cloudaware service account:
Log in to the Google console. Go to 'IAM & admin' → 'Roles' → +CREATE ROLE.
Set a meaningful name and description for the custom role, e.g. Cloudaware Custom Role. Set 'Role launch stage' as General Availability
...
.
Click +ADD PERMISSIONS. Select the following permissions:
For backups |
|---|
|
For labels (tags) |
|
Click CREATE.
Assign the custom role to the service account
...
: 'IAM & admin
...
' → IAM→ select the service account
...
→ click the pencil icon to edit principal → ADD ANOTHER ROLE → Custom → Cloudaware Custom Role → SAVE.