Network user access issue while creating GCP AI Platform Notebook instance

Question

I am trying to create a AI platform notebook instance in a project that has a shared VPC and subnets. I am using a non default service account - gave it network user access. Also gave network user access to the notebook default service account, i.e service-<project_number>@gcp-sa-notebooks.iam.gserviceaccount.com

I am creating a customized instance with c2 machine. The instance is not geting created and I am getting the following error:

Required 'compute.subnetworks.use' permission for '<subnet>'

The service accounts already have network user role, which comprises of subnetworks.use permission. What might be the reason I am getting such an error?

I cannot use default compute engine SA

Answer 1

So what I observed is, we have to give network user access at the shared host project. Also, I had to give network user access to both the notebook default SA and custom SA. This solved the issue for me