✅ Connect Google Vault to Jatheon – Step-by-Step Guide

To connect Google Vault to Jatheon and enable data exports, follow this guide to configure the API, create a service account, and delegate access properly.

🔐 Step 1: Sign In and Open Google Cloud Console

1. Log in to the Google account associated with Vault access.
2. Go to the Google Cloud Console.

📁 Step 2: Create a New Project

1. In the top navigation bar, click the project dropdown.
2. Select New Project.
3. Fill in the required fields.

•  
  • We recommend naming the project something like API1 to keep things simple.

       4. Click Create.

🔹 Step 3: Verify Project Selection

1. Ensure your new project is selected in the top blue navigation bar.
2. If not, click the dropdown to switch to the correct project.

⚠️ Step 4: Configure Internal Access (If Prompted)

1. If a configuration warning appears:
2. Click Configure.
3. Select Internal.
4. Fill in the required details:

• App Name
• Support Email
• App Logo (optional)

      5. Click Save and Continue.

📄 Step 5: Create OAuth Credentials

1. In the left sidebar, go to APIs & Services > Credentials.
2. Click Create Credentials → OAuth Client ID.
3. Choose Desktop App as the application type.
4. Enter a name (e.g., Vault Desktop Access) and click Create.
5. Download the credentials file.
6. Rename it to something identifiable, like clientname1.credentials.json.

✅ Step 6: Enable Google Vault API

1. Visit the Google Vault API Library.
2. Make sure your project is selected.
3. Click Enable.

🚀 Step 7: Create a Service Account

1. Visit the Service Accounts page.
2. Confirm the correct project is selected.
3. Click Create Service Account.
4. Enter a Service Account Name and optional description.
5. Click Create and Continue.
6. For Role, choose Owner.
7. Click Done.

➡️ Copy and save the Client ID for later use.

🔑 Step 8: Generate and Download a Key

1. In the Service Account list, click the Actions (⋮) menu next to your account.
2. Select Manage Keys.
3. Click Add Key → Create New Key.
4. Choose JSON.
5. The key file will download automatically. Store it securely.

🤜 Step 9: Set Up Domain-Wide Delegation

1. Go to your Google Admin Console.
2. Navigate to:
3. Security > Access and Data Control > API Controls
4. Scroll down and click Manage Domain-Wide Delegation.
5. Click Add New.
6. Paste the Client ID you saved earlier.

7. Under OAuth Scopes, add the following scopes (one per line):

   arduino
    
   https://www.googleapis.com/auth/ediscovery https://www.googleapis.com/auth/devstorage.full_control
8. Click Authorize.

1. ✉️ Final Note
2. ✅ The service account is now authorized to connect to the Google Vault API.
3. 📌 Important: This service account cannot directly access Vault data.
   You must provide the email address of a user with Vault export and download permissions to impersonate during migration.