> ## Documentation Index
> Fetch the complete documentation index at: https://anaconda.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring Operations Center Admins using Google OIDC

If you prefer to use OpenID Connect (OIDC) to authorize Admin users to manage cluster resources, you’ll need to use the Data Science & AI Workbench Operation Center to configure an Auth Connector.

**Before you begin:** You’ll need to [setup a project page and credentials](https://console.developers.google.com/apis/credentials).

**To configure an OIDC Auth Connector:**

1. Log in to Workbench, select <Icon icon="user" iconType="regular" /> **Menu** in the top right corner and click the **Administrative Console** link displayed at the bottom of the slide out window.

2. Click **Manage Resources**.

3. Login to the Operations Center using the Administrator credentials [configured after installation](../../install/config.html).

4. Select **Settings** in the login menu in the upper-right corner.

   <Frame>
     <img src="https://mintcdn.com/anaconda-29683c67/Jbxn1KJ0XaeZeGhX/images/data-science/telekube-admin.png?fit=max&auto=format&n=Jbxn1KJ0XaeZeGhX&q=85&s=11855f4e71f90c9f27872dc4b92eea8d" alt="" width="2152" height="940" data-path="images/data-science/telekube-admin.png" />
   </Frame>

5. In the left menu, select **Auth Connectors**, then click **+ Create** (if this is your first Auth Connector) or **+ New Connector** in the bottom-left, if other connectors have been configured.

   <Frame>
     <img src="https://mintcdn.com/anaconda-29683c67/Jbxn1KJ0XaeZeGhX/images/data-science/telekube-auth-connector.png?fit=max&auto=format&n=Jbxn1KJ0XaeZeGhX&q=85&s=3b4477a1fbf1a107b3a0cf956668e247" alt="" width="1802" height="928" data-path="images/data-science/telekube-auth-connector.png" />
   </Frame>

6. Provide the information required to connect to OIDC—including the client credentials—using the following format:

   ```
   kind: oidc
   metadata:
   name: google
   spec:
   claims_to_roles:
   - {claim: "hd", value: "domain.com", roles: ["@teleadmin"]}
   client_id: <client id>
   client_secret: <client secret>
   issuer_url: https://accounts.google.com
   redirect_url: "https://ops.domain/portalapi/v1/oidc/callback"
   scope: [email]
   version: v2

   ```

   **NOTE:** Using the above settings, all accounts belonging to `domain.com` will be a member of `@teleadmin` (making them superadmins).

   EXAMPLE:

   <Frame>
     <img src="https://mintcdn.com/anaconda-29683c67/yg2lVfLe5JTI9sv-/images/data-science/oidc-auth-connector.png?fit=max&auto=format&n=yg2lVfLe5JTI9sv-&q=85&s=11dd89943dfda055c52eb02dab04e978" alt="" width="1615" height="830" data-path="images/data-science/oidc-auth-connector.png" />
   </Frame>

7. Click **Save** to update Workbench to use this new connector. If the account already exists, you’ll get an error.