title: Commvault Cloud Scale Manager
description: Permissions required for Commvault Scale Manager on GCP Compute Engine.
stage: GA
includedPermissions:

# Compute – Addresses
- compute.addresses.get
- compute.addresses.list
- compute.addresses.use
- compute.addresses.useInternal

# VM Lifecycle Management
- compute.instances.create
- compute.instances.delete
- compute.instances.get
- compute.instances.list
- compute.instances.start
- compute.instances.stop
- compute.instances.attachDisk
- compute.instances.detachDisk
- compute.instances.setLabels
- compute.instances.setMetadata
- compute.instances.setTags
- compute.instances.setServiceAccount
- compute.instances.getSerialPortOutput
- compute.instances.setDeletionProtection
- compute.instances.updateDisplayDevice

# Compute – Images
- compute.images.list
- compute.images.get
- compute.images.useReadOnly

# Compute – Node Groups
- compute.nodeGroups.get
- compute.nodeGroups.list

# Disk Management
- compute.disks.create
- compute.disks.delete
- compute.disks.get
- compute.disks.list
- compute.disks.resize
- compute.disks.use
- compute.disks.setLabels
- compute.disks.createSnapshot
- compute.diskTypes.get
- compute.diskTypes.list

# Snapshot Management
- compute.snapshots.create
- compute.snapshots.delete
- compute.snapshots.get
- compute.snapshots.setLabels
- compute.snapshots.useReadOnly

# Machine Types / Zones / Regions
- compute.machineTypes.get
- compute.machineTypes.list
- compute.zones.get
- compute.zones.list
- compute.regions.get
- compute.regions.list
- compute.globalOperations.get
- compute.regionOperations.get
- compute.zoneOperations.get

# Networking (VPC / Subnets)
- compute.networks.get
- compute.networks.list
- compute.subnetworks.get
- compute.subnetworks.list
- compute.subnetworks.use
- compute.subnetworks.useExternalIp

# Project Info
- compute.projects.get
- resourcemanager.projects.get

# IAM (Service Account Usage)
- iam.serviceAccounts.get
- iam.serviceAccounts.list
- iam.serviceAccounts.actAs

# Cloud Storage (Buckets / Objects)
- storage.buckets.list
- storage.buckets.get
- storage.buckets.update
- storage.buckets.getIamPolicy
- storage.buckets.delete
- storage.objects.create
- storage.objects.get
- storage.objects.list
- storage.objects.update
- storage.objects.delete
- storage.multipartUploads.create

# KMS (Encryption Keys)
- cloudkms.cryptoKeys.list
- cloudkms.cryptoKeys.get
- cloudkms.cryptoKeys.create
- cloudkms.cryptoKeys.update
- cloudkms.cryptoKeyVersions.useToEncrypt
- cloudkms.cryptoKeyVersions.useToDecrypt
- cloudkms.keyRings.create
- cloudkms.keyRings.get