Troubleshoot GCP permissions

Google Cloud Platform (GCP) permissions are required to setup prerequisites to onboard GCP logs. If you or your GCP administrator is encountering any permission issues, verify the user has the associated permissions to perform the corresponding actions on GCP.

Enable service APIs

Ensure the user has the following permissions associated with the user.

Permissions

• servicemanagement.services.get
• servicemanagement.services.update

The following are default GCP roles with the mentioned permissions. Ensure at least one of the following is bound to the service account or user trying to enable GCP service APIs.

Roles

• Service Config Editor
• Editor
• Owner

Create GCS bucket

Ensure the user has the following permissions associated with the user.

Permissions

• storage.buckets.create

There are many default roles that contain the mentioned permission, the following roles are a small subset.

Roles

• Storage Admin
• Editor
• Owner