Set up Database Center

Preview — Gemini in Databases

This feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. You can process personal data for this feature as outlined in the Cloud Data Processing Addendum, subject to the obligations and restrictions described in the agreement under which you access Google Cloud. Pre-GA features are available "as is" and might have limited support. For more information, see the launch stage descriptions.

Before you begin

Before you set up Database Center, complete the steps in the following sections.

Grant billing permissions

Grant the roles/billing.admin IAM role.

Grant IAM permissions

Before members of your team can use Database Center, they need Identity and Access Management (IAM) permissions. This step is typically performed by an administrator.

Permission levels determine the resources that Database Center users can view. To let users access all resources for your organization, we recommend that you grant organization-level permissions.

To grant IAM permissions using the Google Cloud CLI, choose one of the following options:

Note: This role isn't visible in the Google Cloud console.

• Grant permissions at the organization level:

  gcloud organizations add-iam-policy-binding ${ORGANIZATION_NUMBER} --member='user:[e-mail]'
  --role='roles/databasecenter.viewer'
  
  

  Note: Users with the databasecenter.viewer role automatically have access to all Database Center and Gemini in Databases data for all instances in the Google Cloud project for which Database Center is enabled. This data includes all vulnerabilities such as results from Security Command Center and recommendations from Recommendation Hub for all databases. To see details of these recommendations, additional Identity and Access Management privileges might be required.

  gcloud organizations add-iam-policy-binding ${ORGANIZATION_NUMBER} --member='group:[e-mail]' --role='roles/databasecenter.viewer'
  
  

• Grant permissions at the folder level:

  gcloud resource-manager folders add-iam-policy-binding ${CONSUMER_FOLDER} --member='user:[e-mail]' --role='roles/databasecenter.viewer'
  
  

  gcloud resource-manager folders add-iam-policy-binding ${CONSUMER_FOLDER}
  --member='group:[e-mail]' --role='roles/databasecenter.viewer'
  
  

• Grant permissions at the project level:

  gcloud projects add-iam-policy-binding ${CONSUMER_PROJECT} --member='user:[e-mail]' --role='roles/databasecenter.viewer'
  
  

  gcloud projects add-iam-policy-binding ${CONSUMER_PROJECT} --member='group:[e-mail]' --role='roles/databasecenter.viewer'
  
  

Enable Security Command Center

To gain access to security-related health issues in Database Center, enable Security Command Center at your preferred pricing tier:

1. To gain access to basic security issues, enable Security Command Center Standard. To gain access to all health issues supported by Security Command Center, enable Security Command Center Premium.

   For more information about Security Command Center tiers and pricing, see Security Command Center pricing.

   For more information about the security issues supported in Database Center, see Limitations.

2. Activate Security Command Center.

Enable Gemini in Databases

Complete all the steps in Set up Gemini in Databases.

Important: It can take between 24 and 48 hours to enable Gemini in Databases. After you enable Gemini in Databases, you can access Database Center for your project.

What's next

• Customize your database fleet health view.