Authentication :: Service Account (Using Private Key File) [OAuth]

Description

No description available [API Help..]

Instructions

Basically to call Google API as Service account we need to perform following steps listed in 3 sections (Detailed steps found in the help link at the end)

Create Project

1. Go to Google API Console
2. From the Project Dropdown (usually found at the top bar) click Select Project
3. On Project Propup click CREATE PROJECT
4. Once project is created you can click Select Project to switch the context (You can click on Notification link or Choose from Top Dropdown)
5. Click ENABLE APIS AND SERVICES
6. Now we need to Enable two APIs one by one (BigQuery API and Cloud Resource Manager API).
7. Search BigQuery API. Select and click ENABLE
8. Search Cloud Resource Manager API. Select and click ENABLE

Create Service Account

1. Go to Create Service Account
2. From the Project Dropdown (usually found at the top bar) click Select Project
3. Enter Service account name and Service account description
4. Click on Create. Now you should see an option to assign Service Account permissions (See Next Section).

Give Permission to Service Account

1. After you Create Service Account look for Permission drop down in the Wizard.
2. Choose BigQuery -> BigQuery Admin role so we can read/write data. (NOTE: If you just need read only access then you can choose BigQuery Data Viewer)
3. Now choose one more Project -> Viewer and add that role so we can query Project Ids.
4. Click on Continue. Now you should see an option to Create Key (See Next Section).

Create Key (P12)

1. In the Cloud Console, click the email address for the service account that you created.
2. Click Keys.
3. Click Add key, then click Create new key.
4. Click Create and select P12 format. A P12 key file is downloaded to your computer. We will use this file in our API connection.
5. Click Close.
6. Now you may use downloaded *.p12 key file as secret file and Service Account Email as Client ID (e.g. some_name@some_name.iam.gserviceaccount.com).

Manage Permissions / Give Access to Other Projects

1. From the top Select Project for which you like to edit Permission.
2. Go to IAM Menu option (here)
   Link to IAM: https://console.cloud.google.com/iam-admin/iam
3. Goto Permissions tab. Over there you will find ADD button.
4. Enter Service account email for which you like to grant permission. Select role you wish to assign.

Parameters