During restore operations, Commvault recreates or updates Google RDS for Oracle resources and restores data from Cloud Storage to Google RDS for Oracle. The following permissions are required to perform these operations successfully.
Google Cloud Storage Permissions
| Permission | Usage |
|---|---|
storage.buckets.create |
Create Cloud Storage buckets for restore operations. |
storage.buckets.get |
View Cloud Storage bucket metadata. |
storage.buckets.list |
List Cloud Storage buckets. |
storage.buckets.update |
Update Cloud Storage bucket configuration. |
storage.objects.create |
Create Cloud Storage objects during restore operations. |
storage.objects.get |
Read backup objects from Cloud Storage. |
storage.objects.list |
List objects in Cloud Storage buckets. |
storage.objects.delete |
Delete temporary Cloud Storage objects. |
storage.objects.update |
Update Cloud Storage objects during restore operations. |
storage.multipartUploads.create |
Initiate multipart uploads for large restore objects. |
Cloud Spanner Permissions
| Permission | Usage |
|---|---|
spanner.instances.get |
View Cloud Spanner instance details. |
spanner.databases.create |
Create Cloud Spanner databases. |
spanner.databases.drop |
Delete Cloud Spanner databases. |
spanner.databases.updateDdl |
Update Cloud Spanner database schema. |
spanner.databaseOperations.list |
List Cloud Spanner database operations. |
spanner.databaseOperations.get |
View Cloud Spanner database operation details. |
spanner.databases.beginOrRollbackReadWriteTransaction |
Create read/write transactions for restore operations. |
spanner.databases.write |
Write restored data to Cloud Spanner tables. |
spanner.sessions.create |
Create Cloud Spanner sessions. |
spanner.sessions.delete |
Delete Cloud Spanner sessions. |
Dataflow Permissions
| Permission | Usage |
|---|---|
dataflow.jobs.create |
Create Dataflow jobs for restore operations. |
dataflow.jobs.get |
View Dataflow job status and details. |
dataflow.messages.list |
View Dataflow job messages. |
dataflow.shuffle.read |
Read Dataflow shuffle data. |
dataflow.shuffle.write |
Write Dataflow shuffle data. |
autoscaling.sites.readRecommendations |
Read autoscaling recommendations for Dataflow worker autoscaling decisions. |
autoscaling.sites.writeMetrics |
Write autoscaling metrics for Dataflow worker autoscaling decisions. |
autoscaling.sites.writeState |
Write autoscaling state for Dataflow worker autoscaling decisions. |
compute.instanceGroupManagers.update |
Update instance group managers for Dataflow worker management. |
compute.instances.delete |
Delete Dataflow worker instances. |
compute.instances.setDiskAutoDelete |
Set automatic disk deletion for Dataflow worker instances. |
dataflow.streamingWorkItems.commitWork |
Commit work for Dataflow streaming workers. |
dataflow.streamingWorkItems.getData |
Get data for Dataflow streaming workers. |
dataflow.streamingWorkItems.getWork |
Get work for Dataflow streaming workers. |
dataflow.streamingWorkItems.getWorkerMetadata |
Get worker metadata for Dataflow streaming workers. |
dataflow.streamingWorkItems.importState |
Import state for Dataflow streaming workers. |
dataflow.workItems.lease |
Lease work items for Dataflow workers. |
dataflow.workItems.sendMessage |
Send messages to Dataflow work items. |
dataflow.workItems.update |
Update Dataflow work items. |
logging.logEntries.create |
Create log entries for Dataflow workers. |
logging.logEntries.route |
Route log entries for Dataflow workers. |
monitoring.timeSeries.create |
Create monitoring time series for Dataflow workers. |
Cloud Monitoring Permissions
| Permission | Usage |
|---|---|
monitoring.timeSeries.list |
List Cloud Monitoring time series. |
Cloud KMS Permissions
| Permission | Usage |
|---|---|
cloudkms.cryptoKeys.get |
View Cloud KMS key metadata. |
IAM Permissions
| Permission | Usage |
|---|---|
iam.serviceAccounts.actAs |
Impersonate another service account during restore operations. |
Compute Engine Permissions
| Permission | Usage |
|---|---|
compute.machineTypes.get |
View Compute Engine machine type details. |
compute.regions.list |
List Compute Engine regions. |
Resource Manager Permissions
| Permission | Usage |
|---|---|
resourcemanager.projects.get |
View Google Cloud project information. |
resourcemanager.projects.list |
List Google Cloud projects. |