Removing the HYCU Managed Service Account permissions
After you cancel your HYCU for Google Cloud subscription, your HYCU Managed Service Account (HMSA) is kept together with other data for 14 days before it is permanently deleted. However, if for any reason you want to remove the HMSA permissions immediately, you can do it by using one of the following methods:
Method | Instructions |
---|---|
Manual |
In Google Cloud, remove the HMSA permissions. For instructions on how to remove service account permissions, see Google Cloud documentation. |
Automatic |
Click the following link to open Google Cloud Shell, and then follow the instructions in the tutorial: |
i Important If you remove the HMSA permissions by using either of these methods, keep in mind that to add the HMSA back to HYCU for Google Cloud, you will have to grant the HMSA the following roles in Google Cloud on each project that you plan to protect:
-
Compute Admin (
roles/compute.admin
) -
Service Account User (
roles/iam.serviceAccountUser
) -
Storage Admin (
roles/storage.admin
) -
Required only if protecting GKE applications. Kubernetes Engine Admin (
roles/container.admin
)
For instructions on how to grant permissions to service accounts, see Google Cloud documentation.