Fortinet black logo

Online Help

Configure Service Account

Copy Link
Copy Doc ID e0288d11-27c1-11ec-8c53-00505692583a:399894

Configure Service Account

For your service account, you may either use an existing or create a new service account. The service account needs to be created in the project that has OAuth Consent Screen created.

Choose one of the options below to configure the service account:

Create New Service Account

Use Existing Service Account

Create New Service Account

  1. Go to Google Cloud Platform and log in with your Google Workspace account.
  2. With the project selected, click the Navigation Menu , go to IAM & Admin > Service accounts.
  3. Click +Create service account button, then enter a Service account name of your preference and click CREATE AND CONTINUE. Skip the optional steps, and click Done.
  4. In Service Accounts page, click on the service account created to enter Details page, keep a record of the Service Account ID (Email).
  5. Expand SHOW DOMAIN-WIDE DELEGATION to enable Google Workspace Domain-wide Delegation, and click SAVE.
  6. The Client ID will appear, keep a record of the Client ID for use later in Grant Service Account API Access

  7. Click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  8. Then select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Keep the Service Account ID and JSON key for later during Google Cloud authentication during installation.

The Client ID will be used later in Grant Service Account API Access

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access.

Use Existing Service Account

  1. Select the project that contains the service account to be used.
  2. Click the navigation men , and select IAM & Admin > Service Accounts.
  3. Click on the service account to see the details, keep a record of the Service Account ID (Email).
  4. Click on SHOW DOMAIN-WIDE DELEGATION to see make sure Domain-wide delegation is enabled. If it is not enabled yet, enable it.
  5. If you don’t have a JSON private key yet, click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  6. Select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Note: Be sure to keep this key and your service account ID for use later during Google cloud authentication.

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access.

Configure Service Account

For your service account, you may either use an existing or create a new service account. The service account needs to be created in the project that has OAuth Consent Screen created.

Choose one of the options below to configure the service account:

Create New Service Account

Use Existing Service Account

Create New Service Account

  1. Go to Google Cloud Platform and log in with your Google Workspace account.
  2. With the project selected, click the Navigation Menu , go to IAM & Admin > Service accounts.
  3. Click +Create service account button, then enter a Service account name of your preference and click CREATE AND CONTINUE. Skip the optional steps, and click Done.
  4. In Service Accounts page, click on the service account created to enter Details page, keep a record of the Service Account ID (Email).
  5. Expand SHOW DOMAIN-WIDE DELEGATION to enable Google Workspace Domain-wide Delegation, and click SAVE.
  6. The Client ID will appear, keep a record of the Client ID for use later in Grant Service Account API Access

  7. Click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  8. Then select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Keep the Service Account ID and JSON key for later during Google Cloud authentication during installation.

The Client ID will be used later in Grant Service Account API Access

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access.

Use Existing Service Account

  1. Select the project that contains the service account to be used.
  2. Click the navigation men , and select IAM & Admin > Service Accounts.
  3. Click on the service account to see the details, keep a record of the Service Account ID (Email).
  4. Click on SHOW DOMAIN-WIDE DELEGATION to see make sure Domain-wide delegation is enabled. If it is not enabled yet, enable it.
  5. If you don’t have a JSON private key yet, click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  6. Select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Note: Be sure to keep this key and your service account ID for use later during Google cloud authentication.

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access.