Docs / Cloud accounts

Connect Google Cloud

Grant SysJ access through Workload Identity Federation, with no service-account keys.

SysJ will use Workload Identity Federation to act in your Google Cloud project. No service-account key is created or stored.

Create the federation

In your workspace, open Cloud accounts and choose Google Cloud.
Copy the generated gcloud commands. They create a workload identity pool, a provider trusting SysJ, and a service account SysJ may impersonate.
Run them in Cloud Shell or a terminal authenticated to your project.
Paste the service account email back into SysJ, which verifies the connection.

Delete the workload identity provider or remove SysJ’s permission to impersonate the service account.