Google Cloud Platform permissions required by NetBackup Snapshot Manager
Assign the following permissions to the service account that NetBackup Snapshot Manager uses to access assets in the Google Cloud Platform:
compute.diskTypes.get compute.diskTypes.list compute.disks.create compute.disks.createSnapshot compute.disks.delete compute.disks.get compute.disks.list compute.disks.setLabels compute.disks.use compute.globalOperations.get compute.globalOperations.list compute.images.get compute.images.list compute.instances.attachDisk compute.instances.create compute.instances.delete compute.instances.detachDisk compute.instances.get compute.instances.list compute.instances.setMetadata compute.instances.setServiceAccount compute.instances.setLabels compute.instances.setTags compute.instances.start compute.instances.stop compute.instances.use compute.machineTypes.get compute.machineTypes.list compute.networks.get compute.networks.list compute.projects.get compute.regionOperations.get compute.regionOperations.list compute.regions.get compute.regions.list compute.snapshots.create compute.snapshots.delete compute.snapshots.get compute.snapshots.list compute.snapshots.setLabels compute.snapshots.useReadOnly compute.subnetworks.get compute.subnetworks.list compute.subnetworks.use compute.subnetworks.useExternalIp compute.zoneOperations.get compute.zoneOperations.list compute.zones.get compute.zones.list iam.serviceAccounts.actAs resourcemanager.projects.get cloudkms.cryptoKeys.get cloudkms.cryptoKeyVersions.get
Additional permissions required by PaaS workloads:
cloudsql.databases.list cloudsql.instances.list