Resourcemanager.projects.get Access To The GCP Project Cloud Project (Doc ID 3000664.1)

Last updated on JULY 20, 2024

Applies to:

Goal

We are setting up the Stage and Merge BigQuery Event Handler using Oracle GoldenGate for Big Data Version 21.12.0.0.0 (Build 003) in GCP project xxxl-xxx.

The Service Account is granted BigQuery permissions to dataset xx-xx-tables in the GCP project xxxl-xxx.
SA account is also granted read/write access to the GCS bucket xxxl-xx-prd-row-stg-ogg in the xxxl-xxx project.

Here is the documentation we followed.
https://docs.oracle.com/en/middleware/goldengate/big-data/21.1/gadbd/replicate-data-articles.html#GUID-8CD78EDB-2BC1-430C-A322-A008021B8DBD


However, the BigQuery replicat failed to start. The error is
com.google.cloud.storage.StorageException: xxx-p-ogg-bigquerygquery@xx-prod-xxx-acct-mgmt.iam.gserviceaccount.com does not have resourcemanager.projects.get access to the Google
Cloud project. Permission 'resourcemanager.projects.get' denied on resource (or it may not exist).

Based on the error, does the SA require resourcemanager.projects.get access to the GCP project?

Given the security policy, the permissions can be granted to specific GCS bucket and BQ datasets only in the GCP project, but not the GCP project.


 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.