Stay organized with collections
Save and categorize content based on your preferences.
This document shows you how to prepare your environment to get started with
Parameter Manager.
Enable the Parameter Manager API
To enable the Parameter Manager API, follow these steps:
Sign in to your Google Cloud account. If you're new to
Google Cloud,
create an account to evaluate how our products perform in
real-world scenarios. New customers also get $300 in free credits to
run, test, and deploy workloads.
Configure Parameter Manager to use a regional endpoint
To create regional parameters, you must configure Parameter Manager to use
regional endpoints. Regional endpoints are request endpoints that only allow requests to
proceed if the affected resource exists in the location specified by the endpoint.
Using regional endpoints lets you run your workloads in a manner that complies
with data residency and data sovereignty requirements.
Regional endpoints use the following format:
SERVICE_NAME.LOCATION.rep.googleapis.com
To use regional endpoints, you must update your configuration with the regional
endpoint address depending on how you access the Parameter Manager service.
gcloud
To configure the Google Cloud CLI to use regional endpoints, complete the
following steps:
Make sure you're using the Google Cloud CLI 402.0.0 or newer.
Set the api_endpoint_overrides/parametermanager property to the regional endpoint you
want to use:
gcloud config set api_endpoint_overrides/parametermanager https://parametermanager.LOCATION.rep.googleapis.com/
Replace LOCATION with the name of the supported Google Cloud location,
such as us-central1.
REST
To connect to the Parameter Manager service using the API, replace the
generic API endpoint URL (https://secretmanager.googleapis.com/v1/) with the
specific regional endpoint that you want to use. Regional endpoints use the
following format:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Prepare environment for Parameter Manager\n\nThis document shows you how to prepare your environment to get started with\nParameter Manager.\n\nEnable the Parameter Manager API\n--------------------------------\n\nTo enable the Parameter Manager API, follow these steps:\n\n- Sign in to your Google Cloud account. If you're new to Google Cloud, [create an account](https://console.cloud.google.com/freetrial) to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.\n-\n [Install](/sdk/docs/install) the Google Cloud CLI.\n\n- If you're using an external identity provider (IdP), you must first\n [sign in to the gcloud CLI with your federated identity](/iam/docs/workforce-log-in-gcloud).\n\n-\n To [initialize](/sdk/docs/initializing) the gcloud CLI, run the following command:\n\n ```bash\n gcloud init\n ```\n- [Create or select a Google Cloud project](https://cloud.google.com/resource-manager/docs/creating-managing-projects).\n\n | **Note**: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.\n - Create a Google Cloud project:\n\n ```\n gcloud projects create PROJECT_ID\n ```\n\n Replace \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e with a name for the Google Cloud project you are creating.\n - Select the Google Cloud project that you created:\n\n ```\n gcloud config set project PROJECT_ID\n ```\n\n Replace \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e with your Google Cloud project name.\n-\n [Verify that billing is enabled for your Google Cloud project](/billing/docs/how-to/verify-billing-enabled#confirm_billing_is_enabled_on_a_project).\n\n-\n\n\n Enable the Parameter Manager API:\n\n\n ```bash\n gcloud services enable parametermanager.googleapis.com \n ```\n\n-\n [Install](/sdk/docs/install) the Google Cloud CLI.\n\n- If you're using an external identity provider (IdP), you must first\n [sign in to the gcloud CLI with your federated identity](/iam/docs/workforce-log-in-gcloud).\n\n-\n To [initialize](/sdk/docs/initializing) the gcloud CLI, run the following command:\n\n ```bash\n gcloud init\n ```\n- [Create or select a Google Cloud project](https://cloud.google.com/resource-manager/docs/creating-managing-projects).\n\n | **Note**: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.\n - Create a Google Cloud project:\n\n ```\n gcloud projects create PROJECT_ID\n ```\n\n Replace \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e with a name for the Google Cloud project you are creating.\n - Select the Google Cloud project that you created:\n\n ```\n gcloud config set project PROJECT_ID\n ```\n\n Replace \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e with your Google Cloud project name.\n-\n [Verify that billing is enabled for your Google Cloud project](/billing/docs/how-to/verify-billing-enabled#confirm_billing_is_enabled_on_a_project).\n\n-\n\n\n Enable the Parameter Manager API:\n\n\n ```bash\n gcloud services enable parametermanager.googleapis.com \n ```\n\n\u003cbr /\u003e\n\nConfigure Parameter Manager to use a regional endpoint\n------------------------------------------------------\n\nTo create regional parameters, you must configure Parameter Manager to use\nregional endpoints. Regional endpoints are request endpoints that only allow requests to\nproceed if the affected resource exists in the location specified by the endpoint.\nUsing regional endpoints lets you run your workloads in a manner that complies\nwith [data residency](/assured-workloads/docs/data-residency) and data sovereignty requirements.\n\nRegional endpoints use the following format: \n\n```bash\nSERVICE_NAME.LOCATION.rep.googleapis.com\n```\n\nTo use regional endpoints, you must update your configuration with the regional\nendpoint address depending on how you access the Parameter Manager service. \n\n### gcloud\n\nTo configure the Google Cloud CLI to use regional endpoints, complete the\nfollowing steps:\n\n1. Make sure you're using the Google Cloud CLI 402.0.0 or newer.\n\n2. Set the `api_endpoint_overrides/parametermanager` property to the regional endpoint you\n want to use:\n\n ```\n gcloud config set api_endpoint_overrides/parametermanager https://parametermanager.LOCATION.rep.googleapis.com/\n ```\n\n Replace \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e with the name of the supported Google Cloud location,\n such as `us-central1`.\n\n### REST\n\nTo connect to the Parameter Manager service using the API, replace the\ngeneric API endpoint URL (`https://secretmanager.googleapis.com/v1/`) with the\nspecific regional endpoint that you want to use. Regional endpoints use the\nfollowing format: \n\n```\nhttps://parametermanager.LOCATION.rep.googleapis.com/\n```\n\nReplace \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e with the name of the supported Google Cloud location,\nsuch as `me-central2`.\n\nTo see which locations support regional endpoints, see\n[Parameter Manager regional endpoint locations](/secret-manager/docs/locations#parameter_manager_locations).\n\nConfigure roles and permissions\n-------------------------------\n\nGrant the Parameter Manager Admin role to the administrator to provide them with\nthe necessary permissions to work with Parameter Manager.\n\n- To grant the required role, use the following command:\n\n gcloud projects add-iam-policy-binding \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e \\\n --member user:\u003cvar translate=\"no\"\u003eUSER_IDENTIFIER\u003c/var\u003e \\\n --role=roles/parametermanager.admin\n\n Replace the following:\n - \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: your project ID\n - \u003cvar translate=\"no\"\u003eUSER_IDENTIFIER\u003c/var\u003e: the identifier for the user account\n\nWhat's next\n-----------\n\n- Learn about [access control using Identity and Access Management (IAM) roles](/secret-manager/parameter-manager/docs/access-control)"]]
