A Google Cloud service account is an account that is identified by its unique email address and is used by an application or compute workload, rather than a person. The service account does not have a password. You cannot log in to such an account from a browser.

Applications use service accounts to make authorized API calls to Google Cloud services.

The following procedure describes how to create a service account by using the Google Cloud console to secure your Google Cloud resources with Carbon Black Cloud. For details, see Create Service Accounts.

Prerequisites

  • Verify that you have an existing project.
  • Verify that you have the Create Service Accounts IAM role on the project (roles/iam.serviceAccountCreator). For more information, see Manage access.
  • To grant the service account access to your project, verify that you have the Project IAM admin role (roles/resourcemanager.projectIamAdmin).

Procedure

  1. Log in to the Google Cloud console.
  2. From the Select a project drop-down menu, next to the search text box, select a project.
  3. Type Service Accounts in the search text box and click Service Accounts from the search result.
    The Service account page displays under the IAM and Admin category.
  4. Click Create Service Account.
  5. In step 1, Service account details, enter a name for the account.
    The console generates an ID based on the name you provide.
  6. Optional. Edit the ID.
    Once you create the account, you cannot change its ID.
  7. Optional. Enter a description for the purpose of the account.
    For example, Service account to integrate with Carbon Black Cloud console.
    Details on the service account associated with the Google Cloud project to be onboarded.
  8. Click Create and Continue.
    You receive a notification that the service account is created.
  9. In step 2, Grant this service account access to project, click the select a role drop-down menu, and select the Basic > Viewer role.
  10. To save your changes and create the account, click Continue and then Done.

Results

The newly created service account appears with its email address in the list of accounts under the specified project.