Google Vault Configuration

Last published : Apr 17, 2026
To configure the section
  1. Login to https://console.cloud.google.com/ using an Administrator account, click Select a project, then NEW PROJECT.
  2. Enter a name for the project and click CREATE.
  3. Once the project is created, and there are multiple projects, click SELECT PROJECT from the Notifications. You will be navigated to the created project dashboard.
    Note: If this is the first project created, you will automatically be navigated to the project dashboard.
  4. Hover APIs & Services, then select Library.
  5. In the Search for APIs & Services search box, type Gmail.
  6. Click Gmail API.
  7. Once you are in the Gmail API page, click ENABLE.
  8. Click Credentials.
  9. Click Manage service accounts.
  10. Click \+ CREATE SERVICE ACCOUNT.
  11. Enter a name and a description for the service account and click CREATE AND CONTINUE.
  12. Select Owner as a role and click CONTINUE, then click DONE.
  13. You will be redirected to the Service Accounts page. Click the kebab icon and select Manage keys.
  14. Select ADD KEY > Create new key.
  15. Select JSON as a key type and click CREATE.
  16. Once the key is created, you should get prompted to save the file on your computer, save it somewhere secure, you will need it when configuring the collector.
  17. To grant permissions to the application, go to https://admin.google.com > Security > API controls.
  18. Scroll down to Domain wide delegation section and click MANAGE DOMAIN WIDE DELEGATION.
  19. Click Add new.
  20. Open the key file that you saved as JSON above, copy the value of client_id, then paste it in the Client ID field. Enter https://www.googleapis.com/auth/gmail.insertin OAuth scopes field and click AUTHORIZE.
Related information