Create a service account

Let's make sure you're in the right place. This article is for users of our Google Workspace migration and sync products. Developers who need to create service accounts for their apps should use this article.

Set up an account to authorize your Google Workspace migration or sync product. Follow these steps to create a service account in Google Cloud Console. For more details, go to Service accounts.

Step 1: Create a project

  1. Go to the Cloud Console and sign in as a super administrator. If it's your first time signing in to the console, agree to the Terms of Service.
  2. Click IAM & Adminand thenManage Resources. You might have to click Menu "" first.
  3. At the top, click Create Project.
  4. Enter a project name.
  5. (Optional) If you want to add the project to a folder, specify the folder name in the Location box.
  6. Click Create.

Important: By default, only the creator of the project has rights to manage the project. To ensure the project can be maintained if the creator leaves the organization, you should assign at least one other person the role of Project Owner. Learn more.

Step 2: Turn on the APIs for the service account

  1. Check the box next to your new project.
  2. Click APIs & Servicesand thenLibrary. You might have to click Menu "" first.
  3. For each API you require (below), click the API name and then Enable.

    Tip: If you can't find the API, specify the API name in the search box.

  4. Repeat step 3, as required.
Product APIs
Google Workspace Migration for Microsoft Exchange (GWMME)

Google Workspace Migration for Microsoft Outlook (GWMMO)

Admin SDK, Google Calendar API, Contacts API, Gmail API, Groups Migration API
Password Sync Admin SDK
Google Workspace Migration for HCL Notes (GWMHN) Google Calendar API, Google People API, Gmail API, Groups Migration API

Note: If you’re using GWMHN 5.1 or earlier, use the Contacts API instead of the Google People API.

Google Calendar Connector for HCL Notes (GCCHN) Admin SDK, Google Calendar API
Google Calendar Resource Sync (GCRS) Admin SDK, Google Calendar API

Step 3: Set up the OAuth consent screen

Tip: When selecting the email addresses below, use shared administrator email accounts.

  1. Click APIs & Servicesand thenOAuth consent screen. You might have to click Menu "" first.
  2. For User Type, select Internal.
  3. Click Create.
  4. For App name, specify the name of your application. For example, GWMME.
  5. Select a User support email for users to contact you with questions.
  6. For Developer contact information, enter email addresses so Google can contact you about changes to your project.
  7. Click Save and Continueand thenSave and Continueand thenBack to Dashboard.

Step 4: Create the service account

  1. Click APIs & Servicesand thenCredentials. You might have to click Menu "" first.
  2. Click Create Credentialsand thenService account.
  3. For Service account name, enter a name for the service account.
  4. (Optional) For Service account description, enter a description of the service account.
  5. Click Create and Continue.
  6. Click Done.
  7. For Service Accounts, click the email address of the service account you created.
  8. Click Show Domain-Wide Delegation.
  9. Check the Enable Google Workspace Domain-wide Delegation box.

    Important: If you’re installing GWMME or Password Sync, make a note of the Unique ID value for the service account. This is also the service account’s client ID and you'll need it later.

    Tip: You can also find the client ID on the Details tab of the service account or in the JSON file created above.

  10. Click Save.
  11. At the top, click Keysand thenAdd Keyand thenCreate new key.
  12. Make sure the key type is set to JSON and click Create.

    You'll get a message the service account's private key JSON file was downloaded to your computer. Make a note of the file name and where your browser saves it. You'll need it later.

  13. Click Close.

Next step

Return to your migration or sync product to continue the setup process:


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
73010
false