Skip to main content

Fixing Disabled Service Account Key Creation in a Google Cloud Project

This guide explains how to enable Service Key Creation when a policy constraint is enforced on your organization.

Written by Arthur Van Dyke

How-To

1. Open a Private browser tab.

3.Make sure you’re signed in with the same Google account you use for your Play Console.

IAM/Permissions

In Cloud Console, open the Project Switcher.

  • Note: You might see “Select a project,” “No organization,” or your organization’s domain name instead.

Click the three-dot icon in the top-right → then IAM/Permissions.

Make sure your organization’s domain now appears in the Project Switcher.

Add the Organization Policy Administrator Role

  1. Find your email address and click the pencil icon to the right of it.

  2. Click + Add another role → then in the dropdown menu that appears, search for Organization Policy Administrator.

Select Organization Policy Administrator → then click Save.

Add Permissions to the Organization

Repeat the same steps for the organization, so it also has the Organization Policy Administrator role.

Navigate to "Disable Service Account Key Creation":

  1. Wait a few minutes, then refresh your browser a couple times.

  2. Click Organization Policies in the left-hand menu.

  3. Search for constraints/iam.disableServiceAccountKeyCreation in the filter bar.

  4. Click the Disable service account key creation item that shows Active under the Enforcement state column.

Turn Constraint Off

  1. Click Manage policy → then scroll down and click Enforced.

  2. Change Enforcement to Off → then click Done.

  3. Click the blue Set policy button.

Create your API Key

  1. Wait 1 hour, then refresh your browser a couple times.

  2. Return to the Project Switcher menu by clicking the item in the upper left corner.

  3. Select your Subsplash project.

  4. Scroll down in the left-hand menu, and click Service Accounts.

  5. Return to the creation of your API User and Private Key


If you encounter an error or cannot complete any of these steps, please contact Subsplash Support. Our Developer Account Support team will help you review your permissions and get everything connected.

Did this answer your question?