---
title: "GCP Service Account for vDiscovery"
canonical: "https://docs.infoblox.com/space/DeploymentGuidevNIOSforGCP/736396200/GCP%20Service%20Account%20for%20vDiscovery"
format: markdown
---
To enable the connection from vDiscovery to GCP and for it to work properly, you must use a service account with the appropriate permissions assigned to it. In GCP, this is done with roles and can be accomplished using the primitive role, predefined roles or custom roles. If in doubt, use the ‘Viewer’ (primitive) role, as is described below using a new account as an example.

To create a service account:

1. In the GCP Console, expand the navigation menu and navigate to **IAM & admin → Service accounts**.

![image](media://137098ac-1c85-4613-9300-92bae55ed830)

2. Click **CREATE SERVICE ACCOUNT**.

![image](media://1b282f79-f821-477d-91ba-7707dccc3c80)

3. Enter a display name for your service account.
4. Review the Service account ID.
5. Optional: Enter a Service account description.
6. Click **CREATE AND CONTINUE**.

![image](media://53117ab7-32f1-4c32-848a-30897f8f82c9)

7. Expand the **Select a role** menu.

![image](media://409ba066-7c6e-4d38-aa53-51886a80e7a8)

8. Select **Project → Viewer**.
9. Click **Continue**.

![image](media://2d6b8252-fef2-4f37-b51c-a8cc8c93f768)

10. Click **DONE**.

![image](media://afbdfe12-615c-4246-9235-b6d5ba239033)

11. On the Service Accounts page, click on the new service account.

![image](media://67947dbe-89d2-45d6-afb5-8bf1345d03e9)

12. On the **Keys** tab, Click **ADD KEY → Create new key**.

![image](media://bb1f9715-6d96-4d13-a94c-bd0f14c9daf6)

13. Select **JSON** and click **CREATE**.

![image](media://fcf75d92-011d-4011-8337-5ba44ed0f7cb)

14. If prompted, complete any steps to save the resulting file.
15. Click **Close**.

![image](media://6a246d5d-758a-4710-82e4-8e395a7584d8)