# Permission Error

**URL:** <https://discuss.hail.is/t/permission-error/2835>\
**Category:** Hail Query & hailctl\
**Created:** [September 15, 2022, 4:06am UTC](https://discuss.hail.is/t/permission-error/2835 "2022-09-15T04:06:45Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![tpoterba](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.hail.is/tpoterba/32/61_2.png) [@tpoterba](https://discuss.hail.is/u/tpoterba)\
**Post date:** [September 15, 2022, 1:30pm UTC](https://discuss.hail.is/t/permission-error/2835/2 "2022-09-15T13:30:26Z")

</div>

Permissions on the cloud are unfortunately a lot more complicated than institutional HPC clusters. The core issue here is that Dataproc clusters aren’t using permissions from your Google account, but rather from the **compute engine service account** for your billing project. That service account is listed in the error, [XXXX-compute@developer.gserviceaccount.com](mailto:XXXX-compute@developer.gserviceaccount.com). There are two solutions here:

1. Ask whoever owns the project where the data lives to grant storage object administrator privileges to your compute service account above. This is the preferred solution since it incurs no additional cost.

2. Use your Google account through `gsutil` to copy the data into a bucket owned by your project (or one where you can grant this service account privileges). This is a worse solution because it requires paying for two copies of the data.

---

_[View the full topic](https://discuss.hail.is/t/permission-error/2835)._
