Google Service Accounts

ANODOT USE OF GOOGLE SERVICE ACCOUNTS

For more information on Google service accounts, see Understand Service Accounts.

AUTHENTICATING WITH A SERVICE ACCOUNT

  1. Create a service account for your application, according to the service’s required credentials.
  2. Enable the roles listed in the table below for the service account to enable Anodot to collect the required data.
    Service Required Roles
    Google Analytics Read & Analyze
    Google BigQuery BigQuery Data Viewer
    BigQuery User
    Google Cloud Storage

    Storage Object Viewer
    Firebase Viewer
    Service Usage Consumer
  3. Save the exported credentials to a JSON file.
  4. Choose the JSON file when you create the Anodot Data Source.

EXAMPLE: SETTING UP A SERVICE FOR GOOGLE BIGQUERY
Create a Service Account

  1. Go to Google Cloud Platform: Credentials
  2. Click “Create Credentials”, choose “Service Account Key”.

Granting permissions to the Service Account

  1. Go to dashboard: 
    a/ Check that Google BigQuery API is enabled for this project
    b/ If not, click Enable API and enable BigQuery API for this project
  2. Grant the Service Account the necessary IAM Permissions to create queries on your behalf:
    a/ Go to Google Cloud Platform: IAM  & Admin 
    b/ Click the Add button. a dialog will open.
    c/ Fill the email of the service account.
    d/ Select both roles: 
          - BigQuery -> BigQuery User, and 
          - BigQuery -> BigQuery Data Viewer
  3. Create a JSON credentials file.