Application integration | Service Account

[melfeqy03]

Hello

Q1: What is the importance of the service account in the above image ?

Q2:Is it best practice for each integration to have its own service account, or can multiple integrations share the same service account?

Q3:If an integration has a service account, how can I call it directly using the execute API?

[princesslyca]

Hi @melfeqy03,

Welcome to Google Cloud Community!

Service accounts are designed for applications and compute workloads, such as those running on virtual machines like Compute Engine instances. Applications use service accounts to make authorized API calls by authenticating as either the service account itself, or as Google Workspace or Cloud Identity users through domain-wide delegation.

Using a single service account for multiple applications can complicate management. It becomes difficult to determine if the account is still needed when applications are decommissioned, and the account may acquire excessive permissions as application access needs evolve. Also, cloud audit logs lack application-specific information, making it challenging to trace actions and investigate issues. See Best practices for using service accounts

@salonijuneja discussed how to execute an application integration. You can trigger it by clicking a "TEST INTEGRATION" button, which will show output variables in a popup, or by calling a REST API with user credentials.

I hope the above information is helpful.