> ## Documentation Index
> Fetch the complete documentation index at: https://anaconda.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring Operations Center Admins using Google OIDC

If you prefer to use OpenID Connect (OIDC) to authorize Admin users to manage cluster resources, you’ll need to use the Data Science & AI Workbench Operation Center to configure an Auth Connector.

**Before you begin:** You’ll need to [setup a project page and credentials](https://console.developers.google.com/apis/credentials).

**To configure an OIDC Auth Connector:**

1. Log in to Workbench, select <Icon icon="user" iconType="regular" /> **Menu** in the top right corner and click the **Administrative Console** link displayed at the bottom of the slide out window.

2. Click **Manage Resources**.

3. Login to the Operations Center using the Administrator credentials [configured after installation](/docs/data-science/latest/install/config).

4. Select **Settings** in the login menu in the upper-right corner.

   <Frame>
     <img src="https://mintcdn.com/anaconda-29683c67/u4MsRLDCM8Pedgc_/images/telekube-admin.png?fit=max&auto=format&n=u4MsRLDCM8Pedgc_&q=85&s=97acfb9c583578badc06efc6eb38d693" alt="" width="2152" height="940" data-path="images/telekube-admin.png" />
   </Frame>

5. In the left menu, select **Auth Connectors**, then click **+ Create** (if this is your first Auth Connector) or **+ New Connector** in the bottom-left, if other connectors have been configured.

   <Frame>
     <img src="https://mintcdn.com/anaconda-29683c67/9H-5W4tTlP7-Fn32/images/auth-connector.png?fit=max&auto=format&n=9H-5W4tTlP7-Fn32&q=85&s=5a5d49fd8e8fee601ec8304ed5bcba13" alt="" width="1802" height="928" data-path="images/auth-connector.png" />
   </Frame>

6. Provide the information required to connect to OIDC—including the client credentials—using the following format:

   ```
   kind: oidc
   metadata:
   name: google
   spec:
   claims_to_roles:
   - {claim: "hd", value: "domain.com", roles: ["@teleadmin"]}
   client_id: <client id>
   client_secret: <client secret>
   issuer_url: https://accounts.google.com
   redirect_url: "https://ops.domain/portalapi/v1/oidc/callback"
   scope: [email]
   version: v2

   ```

   **NOTE:** Using the above settings, all accounts belonging to `domain.com` will be a member of `@teleadmin` (making them superadmins).

   EXAMPLE:

   <Frame>
     <img src="https://mintcdn.com/anaconda-29683c67/q5KdI2mr6ZKMYRZp/images/oidc-auth-connector.png?fit=max&auto=format&n=q5KdI2mr6ZKMYRZp&q=85&s=9759b8c5c424cca6d71fb566ea657ddf" alt="" width="1615" height="830" data-path="images/oidc-auth-connector.png" />
   </Frame>

7. Click **Save** to update Workbench to use this new connector. If the account already exists, you’ll get an error.