OpenMetadata/docs/install/enable-security/google-sso/create-ingestion-service-account.md

description
This is a guide to create ingestion bot service account.

Create Service Account

Step 1: Create Service-Account

• Go to your project dashboard

• Click on Credentails available on the left side panel

• Click on Manage service accounts availabe on the centre right side.

• Click on CREATE SERVICE ACCOUNT

• Provide the required service account details.

{% hint style="warning" %} Makesure the Service Account Id as ingestion-bot and click on CREATE AND CONTINUE . If you chose a different Service Account Id, add to the default bots list in Configure OpenMetadata Server {% endhint %}

• Click on role and give the owner role. Then click CONTINUE

• Click DONE

• Now you should see you service account listed.

Step 2: Enable Domain-Wide Delegation

• Click on the service account in the list.

• On the details page, you should see SHOW DOMAIN-WIDE DELEGATION

• Click on it and enable google workspace domain wide delegation and then click on SAVE

How to generate Private-Key/Service-Account Json file

• Once done with above steps, click on KEYS available new to DETAILS

• Click on ADD KEY and then create new key

• Select the format. Json format is recommended. Then click on CREATE

• The private-key/service-account json file will be downloaded