Identity and Access Management (IAM) roles and permissions for Cloud Storage.
Google Cloud Storage requires specific permissions to allow Xopero ONE to access and manage backup data. Configuring these permissions ensures seamless backup and recovery operations while maintaining strict access controls on the target storage bucket.
To use a Google Cloud Storage bucket as backup storage repository in Xopero ONE, it is recommended to assign the Storage Admin IAM role (roles/storage.admin with full control of buckets and objects) to the user account on the designated bucket.
Alternatively, you can create a service account with the following permissions:
storage.objects.list
storage.objects.get
storage.objects.create
storage.objects.delete
Xopero ONE does not support Google Cloud Storage buckets with Object Lock or retention enabled. If your compliance strategy requires immutability, select a storage target where this feature is fully supported, such as Xopero Cloud Storage, AWS, Wasabi, or Backblaze B2.