Fortinet black logo

Online Help

Configure Service Account

Copy Link
Copy Doc ID e0288d11-27c1-11ec-8c53-00505692583a:620335

Configure Service Account

For your service account, you may either use an existing or new account.

New Service Account Creation

  1. Go to Google Cloud Platform and log in with your Google Workspace account.
  2. Click on the project drop-down menu > Select a project. Select an existing project you want to monitor or create a new project by selecting New Project.
  3. With the project selected, click the Navigation Menu , go to IAM & Admin > Service accounts.
  4. Click +Create service account button, then enter a Service account name of your preference and click CREATE AND CONTINUE. Skip the optional steps, and click Done.
  5. In Service Accounts page, click on the service account created to enter Details page, keep a record of the Service Account ID (Email).
  6. Expand SHOW DOMAIN-WIDE DELEGATION to enable Google Workspace Domain-wide Delegation, and click SAVE.
  7. The Client ID will appear, keep a record of the Client ID.

  8. Click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  9. Then select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Keep the Service Account ID and JSON key for later during Google Cloud authentication during installation.

The Client ID will be used later in Grant Service Account API Access.

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access

Using Existing Service Account

  1. Select the project that contains the service account to be used.
  2. Click the navigation men , and select IAM & Admin > Service Accounts.
  3. Click on the service account to see the details, keep a record of the Service Account ID (Email).
  4. Click on SHOW DOMAIN-WIDE DELEGATION to see make sure Domain-wide delegation is enabled. If it is not enabled yet, enable it.
  5. If you don’t have a JSON private key yet, click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  6. Select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Note: Be sure to keep this key and your service account ID for use later during Google cloud authentication.

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access

Configure Service Account

For your service account, you may either use an existing or new account.

New Service Account Creation

  1. Go to Google Cloud Platform and log in with your Google Workspace account.
  2. Click on the project drop-down menu > Select a project. Select an existing project you want to monitor or create a new project by selecting New Project.
  3. With the project selected, click the Navigation Menu , go to IAM & Admin > Service accounts.
  4. Click +Create service account button, then enter a Service account name of your preference and click CREATE AND CONTINUE. Skip the optional steps, and click Done.
  5. In Service Accounts page, click on the service account created to enter Details page, keep a record of the Service Account ID (Email).
  6. Expand SHOW DOMAIN-WIDE DELEGATION to enable Google Workspace Domain-wide Delegation, and click SAVE.
  7. The Client ID will appear, keep a record of the Client ID.

  8. Click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  9. Then select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Keep the Service Account ID and JSON key for later during Google Cloud authentication during installation.

The Client ID will be used later in Grant Service Account API Access.

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access

Using Existing Service Account

  1. Select the project that contains the service account to be used.
  2. Click the navigation men , and select IAM & Admin > Service Accounts.
  3. Click on the service account to see the details, keep a record of the Service Account ID (Email).
  4. Click on SHOW DOMAIN-WIDE DELEGATION to see make sure Domain-wide delegation is enabled. If it is not enabled yet, enable it.
  5. If you don’t have a JSON private key yet, click the KEYS tab, then click ADD KEY drop down menu and select +Create new Key.
  6. Select JSON key format and click CREATE. The JSON private key will be downloaded automatically.

Note: Be sure to keep this key and your service account ID for use later during Google cloud authentication.

Once your service account is ready, you must grant it API access to the Google Workspace API. Please continue to next section: Grant Service Account API Access