Project and Service Account

Overview

Google Service accounts are used to allow Matillion Data Loader access to specific resources required for CDC, such as Cloud Storage buckets and Secret Managers. It's recommended you make a Google Service Account specifically for Matillion Data Loader and give access to only the resources you make as part of the CDC setup process.

Creating a project

You will need a project and attached service accounts.

To create a new project:

1. Sign in to your Google Admin console.
2. Click VIEW CONSOLE.
3. On the IAM & admin tab on the left, select Service Accounts.
4. Select CREATE PROJECT on the upper right.
5. Enter the project name. This will create a Project ID that cannot be changed later.
6. Select the Organization and Location of the Project.
7. Select CREATE.

Creating a service account

Once you have a project, you can create a service account:

1. In the IAM & admin tab on the left, select Service Accounts.
2. Select + CREATE SERVICE ACCOUNT at the top.
3. Name your service account, add a description, and then select CREATE.
4. Select DONE to display the Service Accounts page.

Add roles to a service account

Establishing privileges and access for the Service Account.

1. Navigate to IAM & Admin in the Google Cloud console.
2. Click the current project, and then click Open.
3. In the Permission tab, locate your service account and click the edit button (pencil).
4. Add roles.
   • roles/container.admin.
   • roles/iam.serviceAccountAdmin.
5. Click + ADD ANOTHER ROLE if applicable.
6. Click SAVE.