Skip to main content

Privacera Documentation

Preview: File Explorer for GCS

This feature is a preview.

Note

Contact Privacera Support to request enabling this feature.

You can browse Google Cloud Storage (GCS) account, projects, containers, and files using the File Explorer for GCS. You can upload data to and retrieve from GCS. You can control access with resource policies by allowing or denying permissions for users, groups, or roles.

Prerequisites and Setup

  • You must have Google Cloud service account credential such as credential key details in JSON file format.

  • For PrivaceraCloud resource policies, determine beforehand which users or groups need to be given access to your GCS data and what type of access they need: read, read-write, read metadata, or write-metadata.

General Process

The following are the general criteria for configuring File Explorer for GCS:

  • Make sure you have the prerequisites ready.

  • On PrivaceraCloud, connect GCS application.

  • On PrivaceraCloud, define a resource policy for your GCS data and allow or deny users or groups to that policy.

Connect GCS application

For more details, see Connect Google Cloud Storage to PrivaceraCloud.

Modify Resource Policy

After connecting GCS application, modify the default policy to add an Allow Condition as follows: metadata read permission for the public group for bucket name * and object path *.

For more information on creating a policy, see Resource policies.

File Explorer

To view GCS containers and files:

  1. Navigate to Data Inventory > File Explorer.

    Because the policy is enabled, GCS is displayed on the File Explorer page.

  2. On the File Explorer page, you can do the following actions:

    Action

    Description

    Refresh

    Refreshes the display

    Search

    Search for a particular container

    Filter

    Hides or shows columns

    Create Folder

    Creates a folder

    Upload

    Uploads a file

    Delete

    Delete files or folders

    Copy to Clipboard

    Copies the object path

Example of Allowing/Deny Access

You can control access to GCS data by managing permissions in a resource policy.

  1. Create a policy with Read and Write permissions.

  2. To upload a file, perform the following steps:

    1. Navigate to Data Inventory > File Explorer.

    2. Go to the GCS account where you want to upload the file.

    3. Click Upload.

      Add File popup is displayed.

    4. Choose the file to upload and click Upload button.

      The file is uploaded with a success message and seen in the listing.

    5. Navigate to Access Manager > Audits to view the audit log for the upload action.

  3. Edit the policy and remove the Write permission.

  4. To upload a file, perform the following steps::

    1. Navigate to Data Inventory > File Explorer.

    2. Go to the GCS account where you want to upload the file.

    3. Click Upload.

      Add File popup is displayed.

    4. Choose the file to upload and click Upload button.

      "Access Denied" error message is displayed.

    5. Navigate to Access Manager > Audits to view the audit log for the denied upload action.