Installation

Prerequisites

To install IAP Desktop, you'll need:

You do not need admin rights unless you are installing on Windows Server.

To use IAP Desktop, you also need:

A Google Cloud project. If you are a Project Owner of the project, you have all permissions needed to use IAP Desktop. Otherwise, you need a combination of the following roles:
- Compute Instance Admin or Compute Admin (to list and access VM instances)
- IAP-secured Tunnel User (to use IAP TCP forwarding)
A firewall rule that permits access from Identity-Aware-Proxy to VM instances. You can create such a firewall rule by using the following command:
```
gcloud compute firewall-rules create allow-rdp-ingress-from-iap \
    --direction=INGRESS \
    --action=allow \
    --rules=tcp:3389 \
    --source-ranges=35.235.240.0/20
```
For further details setting up permissions and firewall rules, see Preparing your project for IAP TCP forwarding.

To install IAP Desktop on your computer, follow these steps:

Double-click the downloaded installer package
Follow the instructions of the installer. Once you reach the Completed IAP Desktop Setup Wizard step, click Finish to launch IAP Desktop:

You now set up IAP Desktop for first use:

On the Sign-in dialog, click Sign in with Google:
Follow the instructions in the browser to authorize IAP Desktop to access your Google Cloud project.
In the Add project dialog, type the name or ID of a Google Cloud project that contains Windows VM instances, then click OK.
Notice that the project and all Windows VM instances are added to the Project Explorer window:

This completes the installation of IAP Desktop.

IAP Desktop is an open-source project and not an officially supported Google product.

How-to guides

Reference