Configuring google-cloud-dotnet for a desktop application

With the below configuration I receive ‘StatusCode=PermissionDenied, Detail=“The caller does not have permission”’.

The service account related to the CredentialFile has the ‘Logs Writer Role’ assigned.

The configuration:

GoogleStackdriverTarget googleTarget = new GoogleStackdriverTarget { ProjectId = "the-project-id", Name = "this can be anything", CredentialFile = Path.Combine(@"C:\Users\Jason\Downloads\the-generated-filename.json"), ResourceType = "logging_log" };

Is the ResourceType correct for Stackdriver Logging? With the .json file containing sensitive information, deploying this as part of a desktop application doesn’t make sense. What is the practice to secure this?

Cheers

[jskeet]

Hmm. I would probably first try to run the same code with a service account with complete privileges on a test project. It may be that the roles required aren’t obvious. Chris may well know more, and @amanda-tarafa may also have more information. (This is the area within this repo where I know least.)

[manxjason]

Appreciate the help/guidance