Permissions required to run inside Compute Engine

Question

I have a Google Cloud Powershell script for managing snapshots that works flawlessly from my workstation but will not run inside the VM due to permissions errors like this:

PS>TerminatingError(Get-GceDisk): "Google.Apis.Requests.RequestError Insufficient Permission [403] Errors [ Message[Insufficient Permission] Location[ - ] Reason[insufficientPermissions] Domain[global] ] " Get-GceDisk : Google.Apis.Requests.RequestError Insufficient Permission [403] Errors [ Message[Insufficient Permission] Location[ - ] Reason[insufficientPermissions] Domain[global] ]

We have attempted to add my same permissions to the service account without success.

We have attempted to run the script with my Google account from the VM without success.

I think this may possibly have something to do with the Cloud API access scopes, but am having difficulty researching this online.

Can someone point me in the right direction?

score 0 · Accepted Answer · answered Oct 14 '16 at 17:08

Cloud API access scopes was the solution, but changing them requires a new VM. This was easiest to accomplish by drilling into a recent snapshot and clicking 'new instance' from there. When making the new instance, select the appropriate level of Cloud API access. Then it all works fine.

Permissions required to run inside Compute Engine

1 Answers1