Google Service Account

If you have your Gcloud credentials stored, then your server container can authenticate to Google services

Description

As the name explains, Google Service Account add-on allows you to add a Google Service Account to your tagging servers.

These credentials allow you to interact with your Google Cloud project from your tagging server, allowing you to write data to Firestore and BiqQuery with ease.


Implementation

To enable it, open GCP and create a service account with the minimal required permissions to perform the task.

https://cloud.google.com/iam/docs/service-accounts-create#iam-service-accounts-create-console

While assigning permissions to the service account, you will need to attach the BigQuery Editor role:


Google Service Account screenshot

As a best practice, remember to add the required IAM conditions to restrict the access further.


Select the newly created service account

Google Service Account screenshot

And click on KEYS and select Create new key from the 'Add key' dropdown:


Google Service Account screenshot

Select JSON as the format and click on create:


Google Service Account screenshot

Now that the credentials file ve been saved saved on your computer, locate it, go to your container on SprTags > Add-ons > Google Service Account, upload you credentials and click on save.


Google Service Account screenshot