SaaSify GCP Project Configuration Setup

In this Article

• Custom Role Creation

• Creation of Service Account for GCP

• Granting access to Service Account Setup

• Programmatic access to GCP Producer Portal

• Configuration of Test Accounts

• Next Step

In this article, learn how to create a Service Account for GCP, set up a Custom Role, grant access to the Service Account and assign roles, enable programmatic access to the GCP Producer Portal, and configure test accounts.

Custom Role Creation

Before creating a Service Account, we must have a Custom Role with minimal permissions. Follow the steps below to create a Custom Role:

1. Navigate to GCP Console – IAM

2. Select the marketplace project in the project list and click Roles from the left menu.

3. Click on + Create Role.

4. Provide a title for the Custom Role: “GCPMarketplaceRoleForSaaSifyIntegration”

5. If required, provide a Description.

6. Provide the ID: “GCPMarketplaceRoleForSaaSifyIntegration_ID”

7. Select the Role launch stage as General Availability.

8. Click on + Add Permissions:

   1. In the Filter permissions by role field:

      1. Search for “Pub/Sub Editor” and select the same.

      2. Click on Ok.

      3. In the filter, search for “pubsub.subscriptions.create”

      4. Select the permission.

      5. Click on Add.

   2. Once again, click on + Add Permissions

      1. Search for “Pub/Sub Editor” and select the same.

      2. Click on Ok.

      3. In the filter, search for “pubsub.subscriptions.get.”

      4. Select the permission.

      5. Click on Add.

9. Click on + Add Permissions:

   1. Search for “Service Controller” and select the same.

   2. From the list of Permissions, select the below permission and click on Add.

      1. servicemanagement.services.check

      2. servicemanagement.services.report

10. Click on + Add Permissions:

    1. From the list of Permissions, select the below permission and click on Add.

       1. consumerprocurement.entitlements.get

       2. consumerprocurement.entitlements.list

11. Click on Create.

Creation of Service Account for GCP

A Service Account is required to communicate with GCP Marketplace APIs like Cloud Commerce Partner Procurement API and Service Control API to manage customer purchases, accounts, entitlements, and usage report management from SaaSify.

A Service Account will be created within Spektra Systems' public project and provided to you by PSM. No further action is required from your side at this time.

Note:

Please ensure you have received the service account details. If not, kindly reach out to the team.
Example: saasify@spektrasystems-public.iam.gserviceaccount.com

Granting Access to Service Account Setup

To grant access to the Service Account and assign roles, please follow the steps below:

1. Navigate to the GCP Console: Go to the IAM section.

2. Click on "Grant Access." This will allow you to add principals and assign roles to them.

3. Add New Principals: Enter the service account provided by PSM.

4. Assign Roles: Click on the "Select a role" dropdown and add the following roles:

   a. Commerce Price Management Private Offers Admin

   b. Commerce Producer Viewer

   c. GCPMarketplaceRoleForSaaSifyIntegration (the role created during custom role creation).

5. Click on "Save": Ensure all changes are saved.

Programmatic Access to GCP Producer Portal

Programmatic access in SaaSify enables access to the marketplace project. It allows the SaaSify system to access the GCP console.

1. Navigate to IAM in GCP Console.

2. Make sure the <partnercompanyname>-public project is selected.

3. Provide the permissions to the saasify-pvtoffer-svc@spektrasystems.com account as mentioned below:

   1. Click on Grant Access.

   2. Add the New principals as saasify-pvtoffer-svc@spektrasystems.com.

   3. Click on Select a role.

   4. In the Select a role dropdown, type Commerce Price Management Private Offers Admin in the filter text.

   5. It will display the role “Commerce Price Management Private Offers Admin.”

   6. Select the role shown in the result window.

   7. Click on Add Another Role.

   8. In the Select a role dropdown, type Commerce Producer Admin in the filter text.

   9. It will display the role “Commerce Producer Admin.”

   10. Select the role shown in the result window.

   11. Click on Add Another Role.

   12. In the Select a role dropdown, type Service Management Administrator in the filter text.

   13. It will display the role of “Service Management Administrator.”

   14. Select the role shown in the result window.

   15. Click on Save.

Configuration of Test Accounts

Below are the steps that you need to follow to test the purchase of the product:

1. To test the purchase of the product before making it live, we need to make sure that we have the following details:

   1. Email ID of the Test User

   2. Billing Account ID of the Test User (Note: Use 000000-000000-000000 format with A-F and 0-9 numbers and letters)

2. Before proceeding with the test purchase, complete the below steps:

   • Add the test user email under IAM with the required permissions.

     1. Navigate to IAM in GCP Console .

     2. Make sure the <partnercompanyname>-public project is selected.

     3. Click on Grant Access.

     4. Add the New principals (Provide the email ID of the test user).

     5. Click on Select a role.

     6. In the Select a role dropdown, type Commerce Producer Admin in the filter text and click on it.

     7. Click on + Add Another Role.

     8. In the Select a role dropdown, type Service Management Administrator in the filter text and click on it.

     9. Click on + Add Another Role.

     10. In the Select a role dropdown, type Commerce Price Management Private Offers Admin in the filter text and click on it.

     11. Click on Save.

3. Configure the test billing account used to test the purchase. This will make the user eligible for attractive discounts on the incurred charges..

   1. Navigate to the GCP Producer Portal.

   2. Make sure the <partnercompanyname>-public project is selected.

   3. Select Reports from the left menu.

   4. Click on Add a Test Billing Account and provide the billing account ID.

   5. Click on Done.

   6. Click on Save.

   7. This is subject to GCP approval and will take approximately 24 hours.

4. Once the test billing account is approved, you can use the above billing account for public and private test purchases.

Next Step

• Follow the steps on the next page to perform SaaSify GCP Product Configuration Setup.