Blackbaud service account configuration

[battis]

Document and/or automate service account creation.

• Blackbaud Role with minimum permissions (SKY API Platform Manager?)
• Assign Google user as service account
• Add Google user to IAP users
• Assign Blackbaud Role to Google user
• Give Blackbaud Role access to relevant lists in Blackbaud
• Browse to UI as Google user
• Authorize Blackbaud API

[battis]

I think the minimal role may be SKY API Data Sync with only access to the SKY API Sync task. Hard to determine.