Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You can create a service account in the GCP console for Aquila Clouds.

  • Login to the Google Cloud Platform console.

  • Select the following icon (Navigation menu) > APIs & Services tab > select Credentials.

    Image Modified
  • Select the required project.

  • Create a service account.
    Tip: If there is already an existing service account for a project that can be shared, manage that service account. Click Manage service accounts to manage an existing service account.

    • Click Create service account.

    • Enter the name for the service account, ID for the service account, and description for the service account.

    • Click Create.

    • Assign the following roles to the selected project to grant permissions for the resources in the project.

      • Reader Only Roles

        • Compute Viewer

        • Browser

        • BigQuery Data Viewer

        • BigQuery Job User

      • Reader and Writer Roles

        • Compute Admin

        • Browser

        • BigQuery Data Owner

        • BigQuery Job User

  • Click Continue.

  • Click Done.

  • Create private key and download generated Json.

    • On the Service Accounts page, select the required email address to create a key for it.

    • Select the Keys tab, and in the ADD KEY list select Create new key.

    • On the Create private key for Project name page, select JSON as the Key type.

    • Download the JSON file.

  • Go to API & Services

    • Click on Create Credentials > API Key

    • Copy this API Key

    • Click on generated API Key and in API Restrictions, select Restrict Key

    • Select Cloud Billing API, Google Cloud APIs

    • Save the API Key

  • Go to Billing > Billing export and identify Dataset name

    • Click on Dataset name and identify appropriate Big Data Query for Billing ingestion

  • Enable cross project access to service account created above.

    • Firstly, using the project navigation in the top menu select your other(s) project. In this case Project B

    • Select IAM & Admin from the menu, and select IAM

    • Select +ADD/GRANT ACCESS

    • From this new menu, you will need to use the Service account ID created in steps above.

    And following roles assigned to the original Service Account

    Compute Viewer

    Browser

    Monitoring Viewer

Add required permissions for Aquila Clouds

...