# Google Vertex authentication

> To be able to create a connection, you need to have a Google Vertex account with the following credentials:

## Prerequisites

To be able to create a connection, you need to have a Google Vertex account with the following credentials:

* **Project ID**
* **Region**
* **Service account key**

The Google Vertex connector requires a service account with the following permissions:

```
aiplatform.endpoints.predict  
aiplatform.endpoints.get  
aiplatform.endpoints.list  
aiplatform.models.get  
aiplatform.models.list  
aiplatform.locations.get
```
For more information about Vertex AI IAM permissions, see the [Google Cloud documentation](https://docs.cloud.google.com/vertex-ai/docs/general/iam-permissions).

## Add the Google Vertex connection

To create a connection to your Google Vertex instance, you need to perform the following steps:

1. Select Orchestrator from the product launcher.
2. Select a folder, and then navigate to the **Connections** tab.
3. Select **Add connection**.
4. To open the connection creation page, select the connector from the list. You can use the search bar to find the connector.
4. You are redirected to the login page where you must provide your credentials, namely **Project ID**, **Region**, and **Service account key**.

   For any secret-type field, you can select the menu next to the field and choose **Use credential asset** to reference an Orchestrator credential asset linked to an external vault instead of entering the value directly. For more information, see [Use credential assets for connections](credential-store-connections.md).
5. Select **Connect**.

## Google Cloud configuration

There are also some steps you must take in Google Cloud to make sure you can connect to Google Vertex.

* 1. In **Google Cloud**, navigate to **APIs and Services \> Enabled APIs & services**.  
     ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-282934-87ebf7cf.webp)
  2. Make sure **Vertex AI API** is enabled in this screen.  
     ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-282930-3d1988ca.webp)
  3. Next, Navigate to **IAM & Admin \> Admin**, select **Service Accounts** and **Create Service Account** if one does not already exist.  
     ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-282926-e9eff240.webp)
  4. Select the **Service Account** that you intend to use and add a **key** under the **Keys** tab. Select the **JSON Key** type.  
     ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-282922-6667b995.webp)
  5. Paste the entire JSON payload into the **Service Account Key**. For any questions or help you might require, make sure to reach out to your **Google Cloud** admin.