Cannot create key

[simonsaidthis]

Hi, I am a total beginner with Google Cloud, trying to use Cloud to set up Workspace migration from Microsoft 365. I try to follow the steps but when I get to creating a key, I get the following error message: 

The organization policy constraint 'iam.disableServiceAccountKeyCreation' is enforced. This constraint disables the creation of new service account keys. Learn more about disabling service account key creation. 

Tracking number: c2774945823563651

I am the master admin, so I am not sure why I don't have this privilege, or how to give it to myself. 

[MaxImbrox · Accepted solution]

Hi @simonsaidthis,

you can reach the Organizational Policies page of the Google Cloud Platform and disable the mentioned policy at organization level. This particular OP prevent the creation of new keys.

Bye 🙂

[simonsaidthis]

Thanks

[julian_ha]

Hello,

This is exactly where it fails for me. I logged as Super-Admin (same like: Organization Admin?) and have no rights for doing changes on any policy. How is that possible?

My actual goal is to create a project for an app and create a google cloud key there. It doesn't work because as a super admin I don't have permissions...

pls help!!

[aumartinez]

Just if somebody is wondering how to do this, you need to go to top of the business account (not project folder), then add your user and assign yourself the roles, organization administrator and organization policy administrator, you may already have the project creator, then just add the other roles, or if you don't create the user and assign the 3 roles