gcloud compute list networks error: “Some requests did not succeed: - Insufficient Permission”

Question

I have created a project and setup a Windows 2012 VM. I am trying to list the networks in the project. Here are the steps I performed:

Initially, I logged into the V

Answer 1

First use gcloud auth login command to authenticate and get credentials for the tool.

Answer 2

I ran into same error when i was trying to execute "gcloud compute zones list" command (When I logged into GCP instance by using "Open in browser window" option).

Below are the steps which I executed to get it resolved.

Step 1 : Log into GCP instance using "View gcloud command option".

Step 2 : Click on "Run in Cloud Shell command"

Step 3 : Execute gcloud specific command . In my case it was "gcloud compute zones list".

Hola!! It works like magic.!!

Answer 3

As Misha Brukman in this post answered, you don't have to include the url (as this might change) but simply can type the --scopes option "compute -rw" as in:

gcloud compute instances create <vm name> --scopes compute-rw

If you have already created your vm instance, you can simply use the equivalent update command like this:

gcloud compute instances update <vm name> --scopes compute-rw

Answer 4

This is a problem with the permissions of the credentials of the created Virtual Machine.

To work around, you can use gcloud auth login and log into your Google account via the browser. You may also create a service account in the Cloud Console and load it onto the machine, then activate using gcloud auth activate-service-account.

---

This issue is easiest to see in the Cloud Console. Navigate to the instance page for this VM; you'll see something like:

Note that "Compute" is set to "Disabled".

To change these permissions when creating a new VM instance in the Cloud Console, expand the "Management, disk, networking, access & security options" view:

Then, navigate to "Access & security" and change the permissions for "Compute":

This will create the new Virtual Machine that has read access to your project's Google Compute Engine settings.

---

To create a new instance using gcloud, add the following flag to gcloud compute instances create:

--scopes "https://www.googleapis.com/auth/compute.readonly"

You'll need to add any additional permissions you'd like, as well.