--- title: "POST /v1/projects/{projectsId}/locations/{locationsId}/managementServers" method: POST path: "/v1/projects/{projectsId}/locations/{locationsId}/managementServers" tags: ["projects"] --- # POST /v1/projects/{projectsId}/locations/{locationsId}/managementServers `POST /v1/projects/{projectsId}/locations/{locationsId}/managementServers` ## Request - Base URL: `https://backupdr.googleapis.com` - URL: `https://backupdr.googleapis.com/v1/projects/{projectsId}/locations/{locationsId}/managementServers` - Auth: one of: - OAuth 2 and OAuth 2 - Implicit: `https://accounts.google.com/o/oauth2/auth` - Scopes: `https://www.googleapis.com/auth/cloud-backupdr` - Authorization code: `https://accounts.google.com/o/oauth2/auth` - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-backupdr` - OAuth 2 and OAuth 2 - Implicit: `https://accounts.google.com/o/oauth2/auth` - Scopes: `https://www.googleapis.com/auth/cloud-platform` - Authorization code: `https://accounts.google.com/o/oauth2/auth` - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-platform` Creates a new ManagementServer in a given project and location. ## Path parameters - `projectsId` string, required - `locationsId` string, required ## Query parameters - `managementServerId` string - `requestId` string ## Request body - ManagementServer: ManagementServer describes a single BackupDR ManagementServer instance. - `baProxyUri` string[]: Output only. The hostname or ip address of the exposed AGM endpoints, used by BAs to connect to BA proxy. - `createTime` string, google-datetime: Output only. The time when the instance was created. - `description` string: Optional. The description of the ManagementServer instance (2048 characters or less). - `etag` string: Optional. Server specified ETag for the ManagementServer resource to prevent simultaneous updates from overwiting each other. - `labels` object: Optional. Resource labels to represent user provided metadata. Labels currently defined: 1. migrate_from_go= If set to true, the MS is created in migration ready mode. - `managementUri` ManagementURI: ManagementURI for the Management Server resource. - `api` string: Output only. The ManagementServer AGM/RD API URL. - `webUi` string: Output only. The ManagementServer AGM/RD WebUI URL. - `name` string: Output only. Identifier. The resource name. - `networks` NetworkConfig[]: Optional. VPC networks to which the ManagementServer instance is connected. For this version, only a single network is supported. This field is optional if MS is created without PSA - `network` string: Optional. The resource name of the Google Compute Engine VPC network to which the ManagementServer instance is connected. - `peeringMode` 'PEERING_MODE_UNSPECIFIED' | 'PRIVATE_SERVICE_ACCESS': Optional. The network connect mode of the ManagementServer instance. For this version, only PRIVATE_SERVICE_ACCESS is supported. - `oauth2ClientId` string: Output only. The OAuth 2.0 client id is required to make API calls to the Backup and DR instance API of this ManagementServer. This is the value that should be provided in the 'aud' field of the OIDC ID Token (see openid specification https://openid.net/specs/openid-connect-core-1_0.html#IDToken). - `satisfiesPzi` boolean: Output only. Reserved for future use. - `satisfiesPzs` boolean: Output only. Reserved for future use. - `state` 'INSTANCE_STATE_UNSPECIFIED' | 'CREATING' | 'READY' | 'UPDATING' | 'DELETING' | 'REPAIRING' | 'MAINTENANCE' | 'ERROR': Output only. The ManagementServer state. - `type` 'INSTANCE_TYPE_UNSPECIFIED' | 'BACKUP_RESTORE': Optional. The type of the ManagementServer resource. - `updateTime` string, google-datetime: Output only. The time when the instance was updated. - `workforceIdentityBasedManagementUri` WorkforceIdentityBasedManagementURI: ManagementURI depending on the Workforce Identity i.e. either 1p or 3p. - `firstPartyManagementUri` string: Output only. First party Management URI for Google Identities. - `thirdPartyManagementUri` string: Output only. Third party Management URI for External Identity Providers. - `workforceIdentityBasedOauth2ClientId` WorkforceIdentityBasedOAuth2ClientID: OAuth Client ID depending on the Workforce Identity i.e. either 1p or 3p, - `firstPartyOauth2ClientId` string: Output only. First party OAuth Client ID for Google Identities. - `thirdPartyOauth2ClientId` string: Output only. Third party OAuth Client ID for External Identity Providers. ## Response `200` Successful response - Operation: This resource represents a long-running operation that is the result of a network API call. - `done` boolean: If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available. - `error` Status: The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). - `code` integer: The status code, which should be an enum value of google.rpc.Code. - `details` object[]: A list of messages that carry the error details. There is a common set of message types for APIs to use. - `message` string: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. - `metadata` object: Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any. - `name` string: The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`. - `response` object: The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. ## Changes - **2026-11-05** `da857420b4f6`: 4 info - the security scope `https://www.googleapis.com/auth/cloud-backupdr` was added to the endpoint's security scheme `Oauth2` - the security scope `https://www.googleapis.com/auth/cloud-backupdr` was added to the endpoint's security scheme `Oauth2c` - the security scope `https://www.googleapis.com/auth/cloud-platform` was removed from the endpoint's security scheme `Oauth2` - the security scope `https://www.googleapis.com/auth/cloud-platform` was removed from the endpoint's security scheme `Oauth2c` - **2026-10-29** `3244196e66b0`: 4 info - the security scope `https://www.googleapis.com/auth/cloud-backupdr` was added to the endpoint's security scheme `Oauth2` - the security scope `https://www.googleapis.com/auth/cloud-backupdr` was added to the endpoint's security scheme `Oauth2c` - the security scope `https://www.googleapis.com/auth/cloud-platform` was removed from the endpoint's security scheme `Oauth2` - the security scope `https://www.googleapis.com/auth/cloud-platform` was removed from the endpoint's security scheme `Oauth2c` [Operation history](https://skmtc.dev/google/apis/backupdr/changes/v1/projects/:projectsId/locations/:locationsId/managementServers/post.md) --- [API](https://skmtc.dev/google/apis/backupdr.md) - [All operations](https://skmtc.dev/google/apis/backupdr/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/backupdr/revisions/da857420b4f6?raw)