OpenMetadata/deploy/deploy-on-kubernetes/enable-security/google-sso/create-ingestion-service-account.md

description
This is a guide to create ingestion bot service account.

Copy of Create Service Account

Step 1: Create Service-Account

• Go to your project dashboard

• Click on Credentials available on the left side panel

• Click on Manage service accounts available on the centre-right side.

• Click on CREATE SERVICE ACCOUNT

• Provide the required service account details.

{% hint style="warning" %} Make sure the Service Account Id is ingestion-bot and click on CREATE AND CONTINUE. If you chose a different Service Account Id, add it to the default bots list in Configure OpenMetadata Server {% endhint %}

• Click on Select a role and give the Owner role. Then click Continue.

• Click DONE

• Now you should see your service account listed.

Step 2: Enable Domain-Wide Delegation

• Click on the service account in the list.

• On the details page, you should see SHOW DOMAIN-WIDE DELEGATION

• Click on it and enable google workspace domain-wide delegation and then click on SAVE

How to generate Private-Key/Service-Account JSON file

• Once done with the above steps, click on KEYS available new to DETAILS

• Click on ADD KEY and then Create a new key

• Select the format. The JSON format is recommended. Then click on CREATE

• The private-key/service-account JSON file will be downloaded