Adding service accounts as members to buckets

Use the following steps to add a service account as a member to a bucket.

For more information, see the GCP docs.

  1. Go to Cloud Storage > Browser in the same project in the Google Cloud console.
  2. Assign memberships and roles for the Logs bucket.
    1. Find your Logs bucket.
    2. Click Edit bucket permissions in the context menu () or double-click the bucket and then click the Permissions tab.
    3. Click + Add next to the Permissions label.
      Figure 1. Add bucket permission
      GCP user interface, Logs bucket screen, indicating Permissions tab and Add button
    4. Under New members, select the Logger service account.
    5. Under Role, select the custom role created earlier (in the screenshot, the role is called Logger).
      Figure 2. Select custom role
      GCP user interface, Add members and roles screen, indicating New members and Role fields, and Save button
    6. Click Save.
  3. If you created a separate Backups bucket for FreeIPA backups, repeat steps 1 and 2 for the Backups bucket.
    Use the same Logger service account as the custom Logger role created earlier.
For more information, see https://docs.cloud.google.com/storage/docs/access-control/using-iam-permissions#bucket-add.