Connect Google Cloud with a service-account key.
Where to create it
Google Cloud console → IAM & Admin → Service Accounts → Keys → Add key (JSON). Grant the service account Viewer (or per-service roles) so the app can read your resources.
What you enter
Either the fast path or the fields:
- Service-account JSON — paste the whole key file you downloaded, or
- Project ID, Service account email, and Private key (PEM from the JSON) by hand.
If you fill the fields, they take precedence over the pasted JSON.
Permissions
Google Cloud has no read/write toggle in the app — access comes from the role you grant the service account. If a section says an API isn't enabled, open the link in the error, enable that API for the project, and pull to refresh (see "Access, permissions and 'API not enabled'").