Unable to create service key due to missing roles

[Carolin]

Hi!

I need to download a key but Google Cloud won’t let me due to insufficient permissions. It sais, I need the ‘Organization Policy Administrator’. I have already enabled this role on the organization level, BUT I cannot assign this role on project level. Additionally, this role is not inherited from the organization level.

This is my error message:

The organization policy constraint ‘iam.disableServiceAccountKeyCreation’ is enforced on your organization.

I have installed Google Cloud SDK and tried some things from forums, but eveything comes back with an error code. I am also an absolute rookie here.
Please, I need some help!

[DamianS]

Hello @Carolin ,Welcome on Google Cloud Community.

please read carefully https://medium.com/google-cloud/troubleshooting-101-solving-the-service-account-key-creation-is-disabled-error-9dd88c45cee4 and follow the steps from article. If you have any questions, feel free to ask

@Carolin

. I have already enabled this role on the organization level, BUT I cannot assign this role on project level. Additionally, this role is not inherited from the organization level.

because it’s global role, so it cannot be assigned AT project level.

–
cheers,
DamianS
LinkedIn medium.com Cloudskillsboost Sessionize Youtube