#Enable Backup for Google VM Instances

Cloud Backup for IaaS + PaaS supports the SaaS infrastructure mode and CAP Gateway mode to backup Google VM instances.

To back up Google VM instances, complete the steps below:

1. Go to Google Cloud Platform to enable the IAM API. For details, refer to Enable IAM API in Google Cloud Platform.

2. When the IAM API is enabled, create a service account. For details, refer to .

3. After creating the service account, obtain credentials for your service account. For details, refer to Obtain Credentials for Service Account.

4. Go to AvePoint Online Services to create a service account. For details on how to create a service account, refer to .

5. After the service account is ready, go to the Backup page of the Cloud Backup for IaaS + PaaS to configure the backup scope for the Google VM instances.

   • If you want use the SaaS infrastructure mode, refer to Use the SaaS Infrastructure Mode.

   • If you want to use the CAP Gateway mode, refer to Use the CAP Gateway Mode. Before creating a backup scope with the CAP Gateway mode, you can first configure the CAP Gateway. For details, refer to Manage CAP Gateways.

#Enable IAM API in Google Cloud Platform

Follow the steps below to enable IAM API in Google Cloud Platform:

1. Go to Google Cloud Platform and select your project from the top project drop-down list.

2. Navigate to APls & Services > Library.

3. In the search bar, enter: Identity and Access Management (IAM) API.

4. Click the result and then click Enable

#Create a Service Account in Google Cloud Platform

Follow the steps below to create a service account in Google Cloud Platform:

1. Navigate to Menu > IAM & Admin > Service Accounts > Create service account.

2. In the Create service account page, enter a name and description for the service account. The description is optional.

3. Click Create and continue.

4. In the Permissions step, grant the following roles to the service account: Compute Admin, Service Account User, DSPM Service Agent, Content Warehouse Service Agent.

   *Note: To generate index for file-level data export on Google VM instances with CAP Gateway mode, the OS Config Viewer role is additionally required.

5. Click Done to finish creating the service account.

#Obtain Credentials for Service Account

After creating a service account in GCP, follow the steps below to obtain credentials for your service account:

1. In the Google Cloud Platform, navigate to Menu > IAM & Admin > Service Accounts.

2. Select your service account.

3. Click Keys > Add key > Create new key.

4. Select JSON, then click Create. Your new public/private key pair is generated and downloaded to your machine as a new file.

5. Save the downloaded JSON file as credentials.json.

6. Click Close.

7. Open the downloaded file and copy the Project ID, Private key, and Client email. The copied information will be used to create a service account in AvePoint Online Services. For details, refer to .