Hi,
We’re testing Google Document AI OCR from a local Apple Silicon Mac.
Our EU OCR processor works through the Google Cloud console. We have also created a service account with the Document AI API User role.
However, creating a JSON key is blocked by iam.disableServiceAccountKeyCreation. We would prefer to keep that security policy enabled.
We want our local application to submit 46 document images automatically and save the OCR results locally.
What is the simplest recommended keyless authentication method? Would Application Default Credentials with service-account impersonation be appropriate?
Please could someone explain the setup steps and minimum IAM permissions required? We’re currently using a Google Cloud free-trial account.
Cheers,
Ian