Create a service account

Let's make sure you're in the right place. This article is for users of our Google Workspace migration and sync products. Developers who need to create service accounts for their apps should use this article.

Set up an account to authorize your Google Workspace migration or sync product. Follow these steps to create a service account in Google Cloud Console. For more details, go to Service accounts.

Step 1: Create a project

1. Go to the Google Cloud Console and sign in as a super administrator. If it's your first time signing in to the console, agree to the Terms of Service.
2. Click IAM & AdminManage Resources. You might have to click Menu first.
3. At the top, click Create Project and enter a project name.
4. (Optional) To add the project to a folder, for Location, click Browse, navigate to the folder, and click Select.
5. Click Create.
6. By default, only the creator of the project has rights to manage the project. To ensure the project can be maintained if the creator leaves the organization, you should assign at least one other person the role of Project Owner. For details, go to Manage access to projects, folders, and organizations.

Step 2: Turn on the APIs for the service account

1. Check the box next to your new project.
2. Click APIs & ServicesLibrary. You might have to click Menu first.
3. For each API you require (below), click the API name and then Enable:
   • Admin SDK
   • Google Calendar API
   • Contacts API
   • Gmail API
   • Groups Migration API

   Tip: If you can't find the API, specify the API name in the search box.

Step 3: Set up the OAuth consent screen

Tip: When adding the email addresses below, use shared administrator email accounts.

1. Click APIs & ServicesOAuth consent screen. You might have to click Menu first.
2. For User Type, select Internal.
3. Click Create.
4. For App name, add the name of your application. 
5. Select a User support email for users to contact with questions.
6. For Developer contact information, enter email addresses so Google can contact you about changes to your project.
7. Click Save and ContinueSave and ContinueBack to Dashboard.

Step 4: Create the service account

1. Click APIs & ServicesCredentials. You might have to click Menu first.
2. Click Create CredentialsService account.
3. For Service account name, enter a name for the service account.
4. (Optional) For Service account description, enter a description of the service account.
5. Click Create and Continue.
6. Click DoneSave.
7. At the top, click KeysAdd KeyCreate new key.
8. Make sure the key type is set to JSON and click Create.

   You'll get a message that the service account's private key JSON file was downloaded to your computer. Make a note of the file name and where your browser saves it. You'll need it later.

9. Click Close.

Next step

Return to your migration or sync product to continue the setup process:

• GCCHN: Create a service account for domain authorization
• GCRS: Configure Google Workspace
• GWMHN: Admin guide
• GWMMO: Run migrations from the command line

Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.