Google Service Account Credentials

Use Google Service Account Credentials to establish a secure and programmatic connection from HCL UnO Agentic AI Builder solutions to Google Cloud Platform (GCP) services. Unlike user accounts, service accounts represent non-human users and are ideal for server-to-server interactions, allowing your agents to access Google APIs without requiring direct end-user authentication.

Before you begin

Ensure the following prerequisites are met:

  • You have created a Google Cloud Service Account with appropriate roles and permissions for the APIs your agent will access.
  • You have downloaded the service account key in JSON format from the Google Cloud Console.

  • Your google workspace service account is properly authorized. The admin must provide the required service to the user account’s unique ID and configure it in the Admin Console for domain-wide delegation.

    Admin can provide access at Security -> API Controls -> Domain-wide delegation
Table 1. Mandatory fields
Option Description
Credential Name

A unique, user-defined name for this specific Google Service Account credential. This name will be used to identify the credential within HCL UnO Agentic AI Builder.
Project ID

The unique identifier for your Google Cloud project where the service account was created.
Private key ID The unique ID for the private key associated with the service account. Found in the private_key_id field of the JSON key file.
Private Key The private key string used for authentication. Found in the private_key field of the JSON key file.
Client Email The email address that identifies your service account.
Table 2. Optional fields
Options Description
Client ID The unique client ID of the service account.
Auth Uri The authorization endpoint for Google's OAuth 2.0. Typically: https://accounts.google.com/o/oauth2/auth.
Token Uri The token exchange endpoint. Typically: https://oauth2.googleapis.com/token.
Auth Provider X509 Cert Url URL to Google’s public certificates used to verify token signatures.
Client X509 Cert Url URL to the public certificate for your service account, found in the JSON key file.
Endpoint URL The endpoint URL for your Google Vertex resource.
Discover Models

When selected, the system automatically retrieves and displays the latest available LLM models from Google service account in the LLM Name dropdown.

When not selected, the system uses the predefined, static list of models bundled with the product, and newly released Google service account models will not appear in the dropdown.