> For the complete MongoDB documentation index, see www.mongodb.com/docs/llms.txt # Set Up and Manage Google Cloud Service Account Access **Note:** The MongoDB Atlas Shared Responsibility Model defines the complementary duties of MongoDB and its customers in maintaining a secure and resilient data environment. Under this framework, MongoDB manages the security and operational integrity of the underlying platform, while customers are responsible for the configuration, management, and data policies of their specific deployments. For a detailed breakdown of ownership across security and operational excellence, see [Shared Responsibility Model.](https://www.mongodb.com/resources/products/fundamentals/shared-responsibility) ## Overview Some Atlas features such as [Data Federation](https://www.mongodb.com/docs/atlas/data-federation.md#std-label-atlas-data-federation) require access to resources in your Google Cloud Storage environment. To grant access in a secure manner, create or update a Google Cloud [Service Account](https://cloud.google.com/iam/docs/service-account-overview) with access policy. ## Required Access To configure Google Cloud Service Account access, you must have [`Project Owner`](https://www.mongodb.com/docs/atlas/reference/user-roles.md#mongodb-authrole-Project-Owner) access to the project. Users with [`Organization Owner`](https://www.mongodb.com/docs/atlas/reference/user-roles.md#mongodb-authrole-Organization-Owner) access must add themselves to the project as a `Project Owner`. ## Prerequisites - An Atlas [account.](https://www.mongodb.com/docs/atlas/index.md#std-label-atlas-index) - An Atlas `M10+` cluster hosted on Google Cloud. ## Set Up Google Cloud Service Account Access You can set up a Google Cloud service account with access policy for your Atlas project from the Atlas Administration API or Atlas UI. ### Atlas UI You can create a Google Cloud Service Account entirely from within the Atlas Data Federation UI. 1. In Atlas, go to the Project Settings page. If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar. If it's not already displayed, select your desired project from the Projects menu in the navigation bar. In the sidebar, click the icon next to Project Overview. The [Project Settings](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsettings%2FgroupSettings) page displays. 2. In Atlas, go to the Project Integrations page. Click the Integrations tab. The [Project Integrations](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fintegrations) page displays. 3. Configure Google Cloud Service Account access. Click Configure for Google Cloud. Atlas displays the Authorize Google Cloud Service Account page the first time. Subsequently, Atlas displays the Google Cloud Service Account Access page. 4. Create a Google Cloud Service Account. Click Create Google Cloud Service Account. In the modal window that appears, click Create. Click Done to finalize creation of your Google Cloud Service Account. ## View Authorized Google Cloud Service Accounts You can view all Google Cloud service accounts for your Atlas project from the Atlas Administration API or Atlas UI. ### Atlas UI 1. In Atlas, go to the Project Settings page. If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar. If it's not already displayed, select your desired project from the Projects menu in the navigation bar. In the sidebar, click the icon next to Project Overview. The [Project Settings](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsettings%2FgroupSettings) page displays. 2. In Atlas, go to the Project Integrations page. Click the Integrations tab. The [Project Integrations](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fintegrations) page displays. 3. View the authorized Google Cloud service accounts. The Google Cloud Service Account Access page displays. The page displays the list of service accounts configured for your project. For each service account, the page displays the following: | Field Name | Description | | --- | --- | | Service Account | The ID of the service account. | | Created Date | The date when you created and associated the service account with Atlas. | | Actions | The actions that you can take on the associated service account. You can do the following: Click to [remove](https://www.mongodb.com/docs/atlas/security/set-up-gcp-access.md#std-label-remove-gcp-service-account) the service account authorization for Atlas.; Click to [view](https://www.mongodb.com/docs/atlas/security/set-up-gcp-access.md#std-label-view-gcp-service-account-details) service account details or [create](https://www.mongodb.com/docs/atlas/data-federation/tutorial/deploy.md#std-label-gst-deploy-adf) a federated database instance. | ## View Authorized Google Cloud Service Account Details You can view the details of an authorized Google Cloud Service Account from the Atlas Administration API or Atlas UI. ### Atlas UI 1. In Atlas, go to the Project Settings page. If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar. If it's not already displayed, select your desired project from the Projects menu in the navigation bar. In the sidebar, click the icon next to Project Overview. The [Project Settings](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsettings%2FgroupSettings) page displays. 2. In Atlas, go to the Project Integrations page. Click the Integrations tab. The [Project Integrations](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fintegrations) page displays. 3. View the authorized Google Cloud service accounts. The Google Cloud Service Account Access page displays. The page displays the list of service accounts configured for your project. 4. Click the ellipsis () for the Service Account and select View Service Account Details from the dropdown. Atlas displays the Service Account Details window. You can view and copy the following information about the authorized Service Account: | Field Name | Description | | --- | --- | | Atlas GCP Service Account | The ID of the Atlas Google Cloud application. | | Service Account ID | The ID of the service account. | 5. Click Close to close the window. ## Remove Authorized Google Cloud Service Account You can't remove a Service Account that is currently in use. You can remove unused Google Cloud Service Accounts from the Atlas Administration API or Atlas UI. ### Atlas UI 1. In Atlas, go to the Project Settings page. If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar. If it's not already displayed, select your desired project from the Projects menu in the navigation bar. In the sidebar, click the icon next to Project Overview. The [Project Settings](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsettings%2FgroupSettings) page displays. 2. In Atlas, go to the Project Integrations page. Click the Integrations tab. The [Project Integrations](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fintegrations) page displays. 3. View the authorized Google Cloud service accounts. The Google Cloud Service Account Access page displays. The page displays the list of services accounts configured for your project. 4. Click the for the Service Account that you wish to remove. Atlas displays a confirmation window. 5. Enter the ID of the Service Account that is shown in the window and click Delete to remove it.