---
title: Create service account · Cloudflare Email security (formerly Area 1) docs
description: Now that you have created a service account, proceed to adding
  retractions to your email.
lastUpdated: 2025-10-27T15:00:52.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/email-security/deployment/api/setup/gsuite-bcc-setup/create-service-account/
  md: https://developers.cloudflare.com/email-security/deployment/api/setup/gsuite-bcc-setup/create-service-account/index.md
---

1. On the [Google Cloud Console](https://console.cloud.google.com/welcome/new), select **Credentials**.

2. Select **CREATE CREDENTIALS** > **Service account**.

3. Fill in the details to create a service account:

   * **Service account name**: Enter `Message Retraction Service Account`.
   * **Service account ID**: Enter `message-retraction-service-acc`.
   * **Service account description**: Enter `Email security Message Retraction`.
   * Select **CREATE AND CONTINUE**.

4. In **Grant this service account access to project**, select **Select a role** > Choose **Owner**. Select **CONTINUE**, then **DONE**.

5. Go back to **Credentials**, and select your service account under **Service Accounts**. In **Details**, take note of the **Unique ID**.

6. Select **Advanced settings** > **VIEW GOOGLE WORKSPACE ADMIN CONSOLE**, then enter your password.

7. On the sidebar, select **Security** > **Access and data control** > **API controls** > Select **MANAGE DOMAIN WIDE DELEGATION**.

8. Select **Add new** > Add a new client ID:

   * **Client ID**: Enter the **Unique ID** you took note of.

   * **OAuth scopes**: Enter the following URLs:

     ```txt
     https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.alias.readonly, https://www.googleapis.com/auth/gmail.labels, https://mail.google.com/
     ```

   * Select **AUTHORIZE**.

9. Go back to the sidebar > **Service Accounts**.

10. Select the three dots > **Manage keys** > **ADD KEY** > **Create new key** > Select **JSON** > Select **CREATE**. This downloads a `.json` file which you will use at a later stage.

## Next steps

Now that you have created a service account, proceed to [adding retractions](https://developers.cloudflare.com/email-security/deployment/api/setup/gsuite-bcc-setup/add-retraction/) to your email.
