---
name: watsonxdata-s2s_auth
title: Service to service authorization
description: For integrating IBM® watsonx.data with IBM watsonx.data intelligence, you must configure service-to-service authorization in IBM Cloud. A service authorization grants a source service or group of services in any account access to a target service or group of services in this account. You must be in the account where the target service is deployed.
last-updated: 2025-12-09
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/watsonxdata?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Service to service authorization
{: #s2s_auth}

For integrating IBM® watsonx.data with IBM watsonx.data intelligence, you must configure service-to-service authorization in IBM Cloud.
A service authorization grants a source service or group of services in any account access to a target service or group of services in this account. You must be in the account where the target service is deployed.

Ensure that the required steps are first completed in the watsonx.data account and then repeated in the watsonx.data intelligence account, logging in separately to each environment.

## Procedure
{: #s2s_auth_procedure}

1. Log in to [IBM Cloud](https://cloud.ibm.com/) where watsonx.data is deployed.
1. Go to **Manage** > **Access (IAM)**. The **IBM Cloud Identity and Access Management** page opens.
1. From the left panel, select **Authorizations**.
1. On the **Manage authorizations** page, click **Create**.
1. On the **Grant a service authorization** page:
   - If you are setting up authorization in your account, select **This account**.
   - If you are setting up authorization in the enterprise account, select **Other account**.
1. Search and select IBM watsonx.data intelligence as the source and watsonx.data as the target.
1. Select **All resources** as the scope of access.
1. Select all the three roles:
   - **Viewer**
   - **DataAccess**
   - **MetastoreViewer**
1. Click **Authorize**.
1. Log in to the account where watsonx.data intelligence (IKC) is deployed.
1. On the **Manage authorizations** page, click **Create**.
1. Repeat steps 5 to 7 by selecting watsonx.data as the source and IBM watsonx.data intelligence as the target.
1. Select the **Watsonx.data Service Access** role and click **Authorize**.


If you skip these steps, you may still be able to test the connection and add data from it, but metadata enrichment will fail and produce the following error:

``` bash
Failed to get Flight info: CDICO0100E: Connection failed: SQL error: Client error: Authentication failed: Unauthorized
```
{: codeblock}