---
title: OAuth Client Credential
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > OAuth Client Credential
---

# OAuth Client Credential

An OAuth Client Credential in GCP represents a client ID and secret that an application uses to authenticate with Google APIs using the OAuth 2.0 protocol. It enables secure, programmatic access to resources without user interaction, typically in server-to-server or backend integrations.

```
gcp.iam_oauth_client_credential
```

## Fields

| Title                | ID   | Type          | Data Type                                                                                                                                                                                                                                                                                                                              | Description |
| -------------------- | ---- | ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                 | core | string        |
| ancestors            | core | array<string> |
| client_secret        | core | string        | Output only. The system-generated OAuth client secret. The client secret must be stored securely. If the client secret is leaked, you must delete and re-create the client credential. To learn more, see [OAuth client and credential security risks and mitigations](https://cloud.google.com/iam/docs/workforce-oauth-app#security) |
| datadog_display_name | core | string        |
| disabled             | core | bool          | Optional. Whether the OauthClientCredential is disabled. You cannot use a disabled OauthClientCredential.                                                                                                                                                                                                                              |
| gcp_display_name     | core | string        | Optional. A user-specified display name of the OauthClientCredential. Cannot exceed 32 characters.                                                                                                                                                                                                                                     |
| labels               | core | array<string> |
| name                 | core | string        | Immutable. Identifier. The resource name of the OauthClientCredential. Format: `projects/{project}/locations/{location}/oauthClients/{oauth_client}/credentials/{credential}`                                                                                                                                                          |
| organization_id      | core | string        |
| parent               | core | string        |
| project_id           | core | string        |
| project_number       | core | string        |
| region_id            | core | string        |
| resource_name        | core | string        |
| tags                 | core | hstore_csv    |
| zone_id              | core | string        |