Setting up a Service Account

Part 1: Creating a GCP Service Account

Step 1: Access Google Cloud Console

1. Navigate to Google Cloud Console

2. Sign in with your Google account

3. Select an existing project or create a new one from the project drop-down at the top of the page

Step 2: Navigate to Service Accounts

1. In the left sidebar, click on IAM & Admin

2. Select Service Accounts from the sub menu

3. You'll see a list of existing service accounts (if any)

Step 3: Create a New Service Account

1. Click the + CREATE SERVICE ACCOUNT button at the top

2. Fill in the service account details:

   • Service account name: Choose a descriptive name (e.g., "sheets-data-extractor")

   • Service account ID: Auto-generated based on the name (you can customize it)

   • Description: Optional but recommended (e.g., "Service account for extracting Google Sheets data")

3. Click CREATE AND CONTINUE

Step 4: Grant Permissions (Optional)

For basic Google Sheets access, you can skip this step by clicking CONTINUE, then DONE. The service account doesn't need project-level permissions to access sheets that are explicitly shared with it.

---

Part 2: Obtaining the Service Account Email

After creating the service account, you'll be returned to the Service Accounts list page.

1. Locate your newly created service account in the list

2. The Email column displays the service account email address

   • Format: [email protected]

3. Copy this email address - you'll need it to share your Google Sheet

Important: Share Your Google Sheet

To allow the service account to access your Google Sheet:

1. Open your Google Sheet

2. Click the Share button

3. Paste the service account email address

4. Set appropriate permissions (typically "Viewer" for read-only, "Editor" for write access)

5. Uncheck "Notify people" since it's a service account

6. Click Share

---

Part 3: Creating and Downloading the Service Account Key

Step 1: Access Key Management

1. In the Service Accounts list, click on your service account name

2. Navigate to the KEYS tab at the top

3. Click ADD KEY drop-down

4. Select Create new key

Step 2: Generate the Key

1. A dialog will appear asking for the key type

2. Select JSON (recommended format)

3. Click CREATE

Step 3: Secure Your Key

1. The JSON key file will automatically download to your computer

2. IMPORTANT: Store this file securely

   • Never commit it to version control (add to .gitignore)

   • Don't share it publicly

   • This key provides full access to resources the service account can access

3. Rename the file to something memorable (e.g., sheets-service-account-key.json)

Key File Structure

The downloaded JSON file contains:

{
  "type": "service_account",
  "project_id": "your-project-id",
  "private_key_id": "key-id",
  "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
  "client_email": "[email protected]",
  "client_id": "client-id",
  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
  "token_uri": "https://oauth2.googleapis.com/token",
  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
  "client_x509_cert_url": "cert-url"
}

---

Part 4: Enabling the Google Sheets API

Step 1: Navigate to APIs & Services

1. In the GCP Console left sidebar, click APIs & Services

2. Select Library from the sub menu

Step 2: Search for Google Sheets API

1. In the search bar at the top, type "Google Sheets API"

2. Click on Google Sheets API from the search results

Step 3: Enable the API

1. Click the ENABLE button

2. Wait a few seconds for the API to be enabled

3. You'll be redirected to the API dashboard showing the API is now enabled

Verification

You can verify the API is enabled by:

1. Going to APIs & Services > Enabled APIs & services

2. Confirming "Google Sheets API" appears in the list