Add Backup Storage in Google Cloud via Service Account

Google Cloud Storage supports service accounts for application authentication. To connect a Google Cloud Storage account to Managed Backup Service, create a service account, grant it the required permissions, and generate a private key.

This chapter covers the following topics:

• Create Service Account
• Add Google Cloud account in Managed Backup Service
• Add Google Cloud account (Legacy)

Create Service Account

To create a service account and generate its credentials, proceed as follows:

1. Sign in to the Google Cloud Console.
2. In the navigation menu, go to IAM & Admin > Service Accounts.
3. Select the required project.
4. Click Create Service Account.
5. Enter the service account name and description, then click Create and Continue.
6. Assign the required roles to the service account, and configure access for users if necessary.
7. Click Done.
8. In the Service Accounts list, select the service account you created.
9. Open the Keys tab.
10. Click Add Key > Create new key.
11. Select JSON and click Create.
12. Save the downloaded JSON key file in a secure location. You will need this file when adding the Google Cloud account to Managed Backup Service.

Add Google Cloud as Backup Storage

To add a Google Cloud storage in the Management Console, proceed as follows:

1. Open the Management Console.
2. Open the Backup > Storage Accounts page.

3. Click + to launch the Create a new Backup Destination wizard.

4. On the Storage type step select Google Cloud Storage. Click Next.

5. On the Storage account step, select an existing storage account or create a new one. By default, existing storage accounts are displayed. To add a new storage account, click Create a new storage account.
6. Specify the display name for the storage account, service account email, binary key, and project ID. Click Next.
   • Display name. The name of the storage is displayed on the Storage Accounts tab. Users will not see the display name
   • Service account email. The service account email appears on the Details tab of the service account menu
   • Binary key. The P12 key that was downloaded on the step 10 of the Create Service Account section.
   • Project ID. To find it, select the required project in the upper horizontal bar, then copy it from the ID column

5. Set backup destination. In the Destination display name field, specify the display name for the backup destination, specify the bucket, which will be displayed as a backup destination, then select whether you will use an existing bucket or create a new one:

   • Select the New bucket option to create a new bucket. Name the bucket. Select storage class, location, and regional location where the new bucket will be created.
   • Select the Existing bucket option to use the existing bucket, then select it in the drop-down list. Also you can select an external bucket you have access to.

   

6. Select the companies or users to assign to the storage account.

7. Click Next.
8. View the storage account summary, then click Save.

Added Google Cloud storage account appears in the grid.

Refer to Manage Storage Accounts for more information on how to manage the added Google Cloud storage account storage account.