Viewing, Deleting, and Requesting Creation of Service Account Keys

Created by Cheska Perez, Modified on Fri, 6 Sep at 1:36 PM by Shoham Geva

1. As a Partner user, navigate to the Google Cloud Platform (GCP) dashboard by going to console.cloud.google.com, or clicking the “Google Cloud Platform” logo in the upper left of any GCP page.
2. On the dashboard page, you should see a menu on the left hand side. Hover over the “IAM & Admin” option to open up a sub-menu, and then click “Service Accounts”.
3. Locate the relevant service account address to you.This is the one with email bq-partner@.iam.gserviceaccount.com.
  
  Information about several service accounts in your project are described below:
  - 123xxx456-compute@developer.gserviceaccount.com
    - Name: Computer Engine default service account
    - This is the default service account created by GCP for every project. Please do not attempt to modify this service account.
  - dbt-local@.iam.gserviceaccount.com
    - Name: dbt-local
    - This is a service account created by CTA for internal networking and infrastructure. Please do not attempt to modify this service account.
  - bq-cta@.iam.gserviceaccount.com
    - Name: Service Account for CTA
    - This is a service account created by CTA for BigQuery internal set-up. Please do not attempt to modify this service account
  - bq-partner@.iam.gserviceaccount.com (YOURS!)
    - Name: Service Account for Partner
    - This is the service account created for you and other partner users! It has the proper access and permissions configured.
  - Please note that you may have more service accounts in your account than what is listed above due creation of dedicated service accounts to fulfill vendor requirements. If you have any questions regarding any service accounts, please reach CTA at help@techallies.org
4. Click on the name of the bq-partner service account. In the “Keys” tab”, you’ll be able to see all the service account keys connected to this service account.
  
  NOTE: You can delete existing keys not necessary to you, but if you need a new service account key created, please email CTA at help@techallies.org to request a new key. We restrict access to key creation due to security reasons and to cut down on a proliferation of keys. Please note that an admin for your project must approve any new service key creation requests; please cc them on your ticket so we can get that approval.
5. Once created, your service account key will be available in your 1Password Vault. Please make sure to use discretion when sharing keyfiles, as whoever has access to it will be able to access your BigQuery data.