How to use a service account about hermes HOT 1 CLOSED

Hey @marccampbell, good question. The documentation for the production deployment for Hermes is still a work in progress. In general, the domain-wide delegation service account can be used as a service user for Hermes to perform most Google API interactions. In order to use it, please follow the instructions in the README.md here to create the service account and a new key (JSON type) for the service account and download it. Then populate the config.hcl with an auth block using the values from the downloaded JSON key. Here is an example what that might look like:

google_workspace {
.....


 // auth is the configuration for interacting with Google Workspace using a
 // service account.
 auth {
   client_email = "{client-name}@{project-id}.iam.gserviceaccount.com"
   private_key  = "-----BEGIN PRIVATE KEY-----\....."
   subject      = "{hermes-service-user-name}@yourdomain.com"
   token_url    = "https://oauth2.googleapis.com/token"
 }

Here the subject is the Google Workspace user you want to use to perform Hermes operations like sending emails to users or updating document headers, etc.

We are closing this for now but please feel free to reopen it, if this doesn't fix your issue.

from hermes.