Configure Service Account

For your service account, you may either use an existing or create a new service account. The service account needs to be created in the project that has OAuth Consent Screen created.

• Create New Service Account
• Use Existing Service Account

Create New Service Account

1. Go to the Google Cloud Platform portal and log in with your Google Workspace account.
2. With the project selected, click the Navigation Menu on the top left corner, go to IAM & Admin > Service accounts.



3. Click +Create service account, then enter a Service account name of your preference and click CREATE AND CONTINUE.

   Skip the optional steps, and click Done.



4. In Service Accounts page, click on the service account you created to enter the Details page, keep a record of the Service Account ID (Email).



5. Expand SHOW DOMAIN-WIDE DELEGATION, enable Google Workspace Domain-wide Delegation, and click SAVE.

   The Client ID will appear, keep a record of the Client ID for use later in Grant Service Account API Access.

   

6. Click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.

Then select JSON key format and click CREATE. The JSON private key will be downloaded automatically.



Keep the Service Account ID and JSON key later for Google cloud authentication during installation. The Client ID will be used later in Grant Service Account API Access.

Use Existing Service Account

1. Select the project that contains the service account to be used.



2. Click the navigation menu , and go to IAM & Admin > Service Accounts.
3. Click on the service account to see the details, keep a record of the Service Account ID (Email).
4. Click on SHOW DOMAIN-WIDE DELEGATION to see make sure Domain-wide delegation is enabled. If it is not enabled yet, enable it.



5. If you don’t have a JSON private key yet, click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.

Select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Note: Be sure to keep this key and your service account ID for use later during Google cloud authentication.

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access.