Installation

📝 This Wiki page has moved. For the latest content, see Install IAP Desktop on the IAP Desktop documentation page.

Prerequisites

To install IAP Desktop, you need:

Windows 8, Windows Server 2012 or higher
Internet access (at least to Google APIs), either directly, via NAT, or via an HTTP proxy
You do not need admin rights unless you are installing on Windows Server.

To use IAP Desktop, you also need:

A Google Cloud project. If you are a Project Owner of the project, you have all permissions needed to use IAP Desktop. Otherwise, you need a combination of the following roles:
- Compute Viewer (to list and access VM instances)
- IAP-secured Tunnel User (to use IAP TCP forwarding)
A firewall rule that permits access from Identity-Aware-Proxy to VM instances. You can create such a firewall rule by using the following command:
```
gcloud compute firewall-rules create allow-rdp-ingress-from-iap \
    --direction=INGRESS \
    --action=allow \
    --rules=tcp:3389,tcp:22 \
    --source-ranges=35.235.240.0/20
```
For further details on setting up permissions and firewall rules, see Preparing your project for IAP TCP forwarding.

To install IAP Desktop on your computer, follow these steps:

You now set up IAP Desktop for first use:

On the Sign-in dialog, click Sign in:

A web browser window opens.
Sign in with your Google user account.
On the IAP Desktop wants to access your Google account screen, allow IAP Desktop to See, edit, configure, and delete your Google Cloud data by setting the checkbox to enabled:

IAP Desktop requires this scope to access your Google Cloud projects, and to use IAP TCP forwarding.
Click Continue to complete the sign-in.
In the Add project dialog, select your Google Cloud projectand click Add project.

The Project Explorer now shows the project and all VM instances that the project contains:
Optionally, click File > Add project in the menu to add additional projects.