OpenMetadata/docs/install/enable-security/google-sso/create-ingestion-service-account.md

75 lines
3.0 KiB
Markdown
Raw Normal View History

2021-08-01 14:27:44 -07:00
---
description: This is a guide to create ingestion bot service account.
---
# Create Service Account
## Step 1: Create Service-Account
* Go to your project dashboard
![Alt text](https://user-images.githubusercontent.com/83201188/125935620-63a9c619-7e0c-49f7-a1a4-c190194a7f30.png)
* Click on **Credentails** available on the left side panel
![Alt text](https://user-images.githubusercontent.com/83201188/125935630-254cc611-f959-4c5e-b33d-73c1a09cc384.png)
* Click on **Manage service accounts** availabe on the centre right side.
![Alt text](https://user-images.githubusercontent.com/83201188/125935633-cfcc4c3f-3a68-4886-a291-fd98521bc3ad.png)
* Click on **CREATE SERVICE ACCOUNT**
![Alt text](https://user-images.githubusercontent.com/83201188/125935638-e090f62e-86f0-4f14-8887-2b15d38f4f48.png)
* Provide the required service account details.
{% hint style="warning" %}
Makesure the Service Account Id as **ingestion-bot** and click on **CREATE AND CONTINUE** . If you chose a different Service Account Id, add to the default bots list in [Configure OpenMetadata Server](https://github.com/StreamlineData/catalog/tree/3d53fa7c645ea55f846b06d0210ac63f8c38463f/docs/install/install/google-catalog-config.md)
{% endhint %}
![](../../../.gitbook/assets/ingestion-bot-service-account.png)
* Click on **role** and give the **owner** role. Then click **CONTINUE**
![Alt text](https://user-images.githubusercontent.com/83201188/125935643-748b30ee-526b-473b-9c39-8b86e50605a8.png)
* Click **DONE**
![Alt text](https://user-images.githubusercontent.com/83201188/125935647-8042d108-d00a-4ced-9a01-f4c380278982.png)
* Now you should see you service account listed.
![Alt text](https://user-images.githubusercontent.com/83201188/125935649-05d6ec56-d6c1-45ac-8b57-b331c959c087.png)
## Step 2: Enable Domain-Wide Delegation
* Click on the service account in the list.
![Alt text](https://user-images.githubusercontent.com/83201188/125935649-05d6ec56-d6c1-45ac-8b57-b331c959c087.png)
* On the details page, you should see **SHOW DOMAIN-WIDE DELEGATION**
![Alt text](https://user-images.githubusercontent.com/83201188/125935652-7f4d684a-f97e-4915-8994-af8d442004a4.png)
* Click on it and enable google workspace domain wide delegation and then click on **SAVE**
![Alt text](https://user-images.githubusercontent.com/83201188/125935654-73181d92-8e9d-43ec-accf-cba3edbe0166.png)
## How to generate Private-Key/Service-Account Json file
* Once done with above steps, click on **KEYS** available new to **DETAILS**
![Alt text](https://user-images.githubusercontent.com/83201188/125935657-df55ad24-303f-4c65-931b-39ebf65acf09.png)
* Click on **ADD KEY** and then **create new key**
![Alt text](https://user-images.githubusercontent.com/83201188/125935661-ce32b714-a67a-42fa-b989-395a29678e84.png)
* Select the format. **Json format** is recommended. Then click on **CREATE**
![Alt text](https://user-images.githubusercontent.com/83201188/125935663-d047f025-ae85-4cc7-9900-632586cc31be.png)
* **The private-key/service-account json file will be downloaded**