Vision API service identity not created – IAM_SERVICE_NOT_CONFIGURED_FOR_IDENTITIES error

I’m trying to use the Google Cloud Vision API (async PDF OCR) from an Apps Script project.

When I attempt to create the Vision API service identity or run an async OCR job, I get this error:

Error:
IAM_SERVICE_NOT_CONFIGURED_FOR_IDENTITIES
com.google.api.tenant.error.TenantManagerException
service_name = vision.googleapis.com

Project details:

  • Project ID: (PII Removed by Staff)
  • Project Number: (PII Removed by Staff)
  • Billing: Enabled
  • Vision API: Enabled
  • Cloud Storage bucket: (PII Removed by Staff)

What I tried:

  • Enabled Vision, IAM, and Service Usage APIs
  • Attempted to run:
    gcloud beta services identity create --service=vision.googleapis.com --project=jp-cloudvision-api-receipts
  • Tried re-creating the project and bucket multiple times

Need help to:
Enable or repair the Vision API service agent for this project so that the account
(PII removed by Staff)@gcp-sa-vision.iam.gserviceaccount.com`
is created and can access my bucket for Vision async PDF OCR.

Thank you!