Connecting Google Cloud
When you choose Sign in with Google, OmniCloud opens Google’s own sign-in page in the system browser
sheet and asks for permission to manage your Google Cloud resources
(https://www.googleapis.com/auth/cloud-platform). OmniCloud never sees your Google password.
After you pick one of your projects, the app prepares it so it can manage Compute Engine on your behalf:
- Enables the Compute Engine, IAM, Cloud Resource Manager and Cloud Billing (price catalog) APIs in that project.
- Creates a service account named
omnicloud-iosin that project. - Grants it the Compute Admin and Service Account User roles on that project only.
- Creates a key for that service account and stores it in your device’s Keychain.
If your organization does not allow service account keys, the app instead keeps your Google sign-in token in the Keychain and acts with your own permissions. You can revoke access at any time; see the Privacy Policy.
You can also connect a project by importing a service account key file that you created yourself.