Skip to main content

Google Cloud

Learn how to authorize RAW to read Google Cloud.

How to create​

RAW authorizes with Google Cloud APIs using OAuth2.0. For more information see the Google Cloud API authentication page. The pre-requisite is to have a Google Acccount and Google Cloud Project.

This set up should work for any Google Cloud API that uses OAuth2.0

Enable the API under the Project​

See the Library of APIs - search and select the API required, and enable it under the Google Cloud Project. For more information see: Enabling an API

enable api

Service Accounts​

To access a Google Cloud API we will need a Google Service Account, and genereate a Service Account Key. A service account is a special type of Google account intended to be used by an non-human user to authenticate and be authorized to access data in Google APIs.

For more information about this type of credential please check the guides from Google IAM documentation :

Ensure that OAuth Consent is set up. Read more about OAuth consent here.

Creating a Service Account and Service Account Key​

  1. Open the Service accounts page. If prompted, select a project. Then click "Create Service Account".

create service account

  1. Enter a name and description for the service account. The steps "Grant this service account access to project" and "Grant users access to this service account" are optional. When done click "Done".

  2. After creating your the service account, we need to generate a key. Click on the newly created service account.

create service account

  1. Select the "Keys" tab, click on "Add Key" at the bottom and select "Create new key".

create service account

  1. Select JSON and click Create. Remember where this file was downloaded, we will need it later in the registration process.

create service account

Configure the Google Service with Permissions for the Service Account​

Each Google Service will have a different mechanism to add users and permission them. The Service Account just created will need to be added as a User of that Google Service. Please refer to the documentation of the API / Service. More information can be found in: Manage access to service accounts.

Registering the Credential in RAW​

  1. In the RAW Administration Console, click on "Repositories" -> "Credentials" and click on the Google icon.

create service account

  1. Enter the Name for the Credential, and a Scope for this Credential - For a list of available Scopes for Google Cloud APIs see: OAuth 2.0 Scopes for Google APIs. Then Click on "Load from file" to import the values from the JSON file downloaded earlier. Lastly, save the Credential.

create service account