#Create a Service Account in Google Cloud Platform

Follow the steps below to create a service account in Google Cloud Platform:

1. Navigate to Menu > IAM & Admin > Service Accounts > Create service account.

2. In the Create service account page, enter a name and description for the service account. The description is optional.

3. Click Create and continue.

4. In the Permissions step, grant the roles to the service account:

   • To protect Google VM instances, grant the following roles to the service account: Compute Admin, Service Account User, DSPM Service Agent, Content Warehouse Service Agent.

   • To protect Google Cloud Storage buckets, grant the Storage Admin role to the service account.

     NOTE

     • To generate index for file-level data export on Google VM instances with CAP Gateway mode, the OS Config Viewer role is additionally required.
     • To enable CAP Gateway auto-installation for Google VM instance, the Backup and DR Cloud Storage Operator role is additionally required.

5. Click Done to finish creating the service account.