Add Backup Storage in Google Cloud via Service Account

Google Cloud Storage supports service accounts for application authentication. To connect a Google Cloud Storage account to Managed Backup Service, create a service account, grant it the required permissions, and generate a private key.

This chapter covers the following topics:

• Create Service Account
• Add Google Cloud as Backup Storage

Create Service Account

To create a service account and generate its credentials, proceed as follows:

1. Sign in to the Google Cloud Console.
2. Select your project from the dropdown menu in the top bar.
3. Open the navigation menu and go to IAM & Admin > Service Accounts.
4. Click + Create Service Account at the top.
5. Enter the service account name and description, then click Create and Continue.
6. Assign the required roles to the service account, click Continue, and then click Done on the user access setup step.
7. In the Service Accounts list, click on the email address of the account you just created.
8. Switch to the Keys tab at the top.
9. Click the Add Key dropdown and select Create new key.
10. Choose JSON as the key type and click Create.
11. Save the downloaded JSON key file securely. You will need this file to add the Google Cloud storage account to your Managed Backup Service.

Add Google Cloud as Backup Storage

To add Google Cloud storage in the Management Console, proceed as follows:

1. Open the Management Console.
2. Open the Backup > Storage Accounts page.

3. Click + to launch the Create a new Backup Destination wizard.

4. On the Storage type step, select Google Cloud Storage. Click Next.

5. On the Storage account step, select an existing storage account or create a new one. By default, existing storage accounts are displayed. To add a new storage account, click Create a new storage account.
6. Specify the display name for the storage account, service account email, binary key, and project ID. Click Next.
   • Display name. The name of the storage is displayed on the Storage Accounts tab. Users will not see the display name.
   • Service account email. The service account email appears on the Details tab of the service account menu.
   • Binary key. The JSON key file that was downloaded in step 12 of the Create Service Account section.
   • Project ID. To find it, select the required project in the upper horizontal bar, then copy it from the ID column.

7. Set the backup destination. In the Destination display name field, specify the display name for the backup destination and the bucket, then select whether you will use an existing bucket or create a new one:

   • Select the New bucket option to create a new bucket. Name the bucket. Select the storage class, location, and regional location where the new bucket will be created.
   • Select the Existing bucket option to use an existing bucket, then select it in the drop-down list. You can also select an external bucket you have access to.

   

8. Select the companies or users to assign to the storage account.

9. Click Next.
10. View the storage account summary, then click Save.

The added Google Cloud storage account appears in the grid.

Refer to the Manage Storage Accounts chapter for more information on how to manage the added Google Cloud storage account.