SAP Solutions Hosting Services for
Google Cloud

Security

Security on Google Cloud is the key to making the following decisions as you plan for your SAP Implementation

• How to organize your resources on Google Cloud
• Which team members can access and work with resources
• Exactly which permissions each team member needs to have to conform to the least privileges principle for resource access
• Which services and applications need to use which service accounts, and what level of permissions to grant in each case

Additional Capabilities of Security on GCP

1. Resource Hierarchy and Inheritance
   • Define the various resource containers on Google Cloud, how they relate to each other and what the access scopes are with the Cloud Platform Resource Hierarchy.
   • Access control policies applied to a parent resource, such as an organization or project, are inherited by the children of that resource, such as the Compute Engine virtual machines or Cloud Storage buckets in the organization or project.
2. Identity and Access Management
   • Manage access control by defining who has what access to resources with Identity and Access Management (IAM) which provides unified control over permissions for Google Cloud resources. control who can perform control-plane operations on your SAP instances, such as creating and modifying VMs, persistent disks, and networking with IAM.