---
title: Create a Google Cloud Console project and service account
slug: '3365'
canonical_url: https://docs.coveo.com/en/3365/
collection: index-content
source_format: adoc
---
# Create a Google Cloud Console project and service account

To authorize Coveo to access your Google content, a Google Workspace administrator must perform a Google Workspace (formerly G Suite) domain-wide delegation of authority.
Before doing so, however, a Google Workspace domain administrator must create the following:

. [A Google Cloud Console project](#create-a-google-cloud-console-project) for your organization

. [A service account](#create-a-service-account) for the project

The project is required to enable the API keys and the service account is required to enable domain-wide delegation of authority.

> **Note**
>
> If you're not the Google Workspace domain administrator for your company, contact them so they can perform the steps detailed in this article.

## Create a Google Cloud Console project

. Access the Google Cloud Console [**Manage resources**](https://console.cloud.google.com/cloud-resource-manager) page using a Google account with administrator credentials.

. On the **Manage resources** page, click **Create Project**.

![Click create project | Coveo](https://docs.coveo.com/en/assets/images/index-content/manage-resources-page.png)

. Configure the project.

 .. Enter a **Project name**.

> **Note**
>
> The **Project ID** is automatically created based on the project name and appears under the **Project name** field. Click **Edit** to modify the project ID.

 .. Select the **Organization** in which you want to create the API project for the Coveo [source](https://docs.coveo.com/en/246/).

 .. Click **Create**.

![New project configuration | Coveo](https://docs.coveo.com/en/assets/images/index-content/create-project.png)

. On the header, use the search box to search for, and then select, **Google Drive API**.

. On the **Google Drive API** page, make sure that your project is selected on the header, and then click **Enable**.

![Enable Google Drive API | Coveo](https://docs.coveo.com/en/assets/images/index-content/enable-google-drive-api.png)

. On the header, use the search box to search for, and then select, **Admin SDK API**.

. On the **Admin SDK API** page, make sure that your project is selected on the header, and then click **Enable**.

![Enable Admin SDK API | Coveo](https://docs.coveo.com/en/assets/images/index-content/enable-admin-sdk-api.png)

. [Create a service account](#create-a-service-account) for the project.

## Create a service account

. In the [Google Cloud Console](https://console.cloud.google.com/cloud-resource-manager), on the header, use the search box to search for, and then select, **Service Accounts**.

![Service Accounts | Coveo](https://docs.coveo.com/en/assets/images/index-content/service-accounts.png)

. On the **Service Accounts** page, make sure that your project is selected on the header, and then click **Create Service Account**.

. On the **Create service account** page, enter a **Service account name** and a **Service account description**.

> **Note**
>
> The **Service account ID** is automatically created from the **Service account name**.

. Click **Done**.

![Service account details | Coveo](https://docs.coveo.com/en/assets/images/index-content/service-account-details.png)

. On the **Service accounts for project** page, click the service account email.

. On the **Keys** tab, click **Add Key** > **Create new key**.

. Select **P12**, and then click **Create**.

![Create a private key | Coveo](https://docs.coveo.com/en/assets/images/index-content/create-private-key.png)

> **Note**
>
> A private key is automatically downloaded as a Personal Information Exchange (`.p12`) file in your browser's download folder. You'll need the key file to configure your source.

. In the **Private key saved to your computer** dialog box, take note of the **Private key password** for your records, and then click **Close**.

> **Important**
>
> Don't change the **Private key password**.

. On the **Details** tab, take note of the following information:

 ** Service account email (required to configure your source)

 ** Under **Advanced settings**, the **Client ID** that appears under **Domain-wide Delegation** (required for domain-wide delegation)

## What's next?

To grant the source access to your Google account, you must [modify the security parameters](https://docs.coveo.com/en/3369/).