Create a service account

Set up an account for authorizing your G Suite migration or sync tool. Take these steps to create a service account in the Google Cloud Platform Console.  

Step 1: Create a project

  1. Go to the Google Cloud Platform (GCP) Console and sign in as a super administrator. Choose an option: 
    • If you haven't used the GCP Console before, agree to the Terms of Service and click Create Project.
    • If you have used GCP Console before, at the top of the screen next to your most recent project name, click Down Down Arrow to open your projects list. Then, click New Project.
  2. Enter a project name and click Create.

Step 2: Enable the APIs for the service account

  1. In the top-left corner of the GCP console, click Menu Menu and then APIs & Services and then Library.
  2. For each API you require (see below), click the API name and then Enable.

    Tip: If you don't see the API, enter the API name in the search box.

  3. To enable another API, click Back Back.
    You'll return to the API Library.
  4. Repeat step 2, as required.
Tool Enable these APIs
G Suite Migration for Microsoft® Exchange Admin SDK, Google Calendar API, Contacts API, Gmail API, Groups Migration API
G Suite Password Sync Admin SDK
G Suite Migration for IBM® Notes® Google Calendar API, Google People API, Gmail API, Groups Migration API

Note: If you are using GSMIN 5.1 or earlier, use the Contacts API instead of the Google People API.
Google Calendar Connector for IBM Notes Admin SDK, Google Calendar API
Google Calendar Resource Sync Admin SDK, Google Calendar API

Step 3: Create the service account

  1. In the top-left corner of the GCP console, click Menu Menu.
  2. Click IAM & Admin and then Service accounts.
  3. Click Create Service Account and in the Service account name field, enter a name for the service account. 
  4. (Optional) Enter a description of the service account.
  5. Click Create.
  6. (Optional) Assign the role of Project viewer to the new account.
  7. Click Continue and then Create Key.
  8. Ensure the key type is set to JSON and click Create.
    You'll see a message that the service account JSON file has been downloaded to your computer.
  9. Make a note of the location and name of this file.
    You will need it later.
  10. Click Close and then Done.
  11. In the list of service accounts, click the email address that relates to the service account you created and click Edit. 
  12. Click View Domain Wide Delegation Client ID.
  13. In the Product name for the consent screen field, enter a product name.
  14. In the Email address field, use the default email address or assign a new email address.
  15. Click Save.
  16. If you are installing GSMME or GSPS, copy the Client ID value.
    You will need this later.

Important: By default, only the creator of the project has rights to manage the project. To ensure that the project can be maintained if the creator leaves the organization, you should assign at least one other person the role of Project Owner. For details, see Manage project members or change project ownership. 

Next step

Return to your migration or sync tool to continue the setup process: 

Was this helpful?
How can we improve it?