Creating a Google Cloud Platform Service Account

To back up and restore Google Cloud Platform (GCP) instances, you must create a GCP service account, and copy the private key file to each VSA proxy (access node).

Before You Begin

  • To back up and restore Google Cloud Platform (GCP) instances, your GCP service account must have one of the following roles assigned:
    • Owner
    • Compute Instance Admin (v1) and Service Account User.
  • To back up instances from multiple projects, your GCP service account must have access rights to all of the projects (including the projects where VSA access nodes exist).

Important: Beginning with Service Pack 17, you must enable the Cloud Resource Manager API. If you do not enable the API, all backup jobs will fail (including backup jobs for clients that were created in a previous release).


  1. Create a GCP service account through the GCP Console. Refer to Creating and managing service accounts.
  2. Assign the roles accordingly through the GCP Console.
  3. Make a note of the service account ID, project ID, P12 key file name, and P12 key password.
  4. Copy the P12 private key file to the <Commvault base folder>/certificates/external directory on each VSA proxy (access node).

    If the <Commvault base folder>/certificates/external directory does not already exist, create the directory.

What to Do Next

Create a hypervisor to manage backup and restore operations for a Google Cloud Platform (GCP) project. See Adding a Google Cloud Platform Hypervisor.

Last modified: 4/30/2021 2:25:50 PM