Google Cloud Pub/Sub Authorization

If you haven't already done so, you will need to set up a Google Cloud Pub/Sub account before you begin the process below. You will use a service account to access your Cloud Pub/Sub data. See Google's authentication documentation for details on the differences between user accounts and service accounts.

To authorize this integration, you will need to authenticate by creating a service account JWT JSON token.

You will need a service account credential file to use this authorization type. If you do not have one, follow the instructions in Google's documentation to create one. You will need to give Lytics one of the following roles depending on how you want to configure your workflow:

• Pub/Sub Admin level permissions allows Lytics to create and receive new subscriptions without any problems.
• Pub/Sub Editor level permissions will also work.

The other option would be to create your own IAM role with the following actions:

• pubsub.topics.get
• pubsub.subscriptions.get
• pubsub.subscriptions.consume
• pubsub.topics.attachSubscription
• pubsub.subscriptions.create (Optional, but you must provide an existing subscription if your role does not have this action.)

Exports require the following additional actions:

• pubsub.topics.publish
• pubsub.topics.create (Optional, but you must provide an existing topic if your role does not have this action.)

If you are new to creating authorizations in Lytics, see the Authorizations Dashboard documentation for more information.

1. Select Google Cloud from the list of providers.
2. Select the Cloud Pub/Sub Service Account JWT method.
3. Enter a Label to identify your authorization.
4. (Optional) Enter a Description for further context on your authorization.
5. In the Cert JSON textbox, copy the contents of your service account's credential file.
6. Click Save Authorization.