Turn off the Policies that Disable Service Account Creation

Before creating a service account, make sure the Disable service account creation, Disable service account key creation, and Disable service account key upload policies are turned off. You can refer to the steps below to turn off the policies:

If you are required to have the Organization Policy Administrator role to Manage policy, refer to the instructions below to add the Organization Policy Administrator role:
1. Go to .
2. In the resource list, select the organization of the project where you want to create the service account.
3. Refer to the following instructions based on your scenario:
  - If you want to add a new principal, click Grant access. In the panel of granting access, enter your account in the New principals field, select the Organization Policy Administrator role from the Role drop-down list, and click Save.
  - If you want to edit an existing principal, click the Edit principal () button next to the principal. In the panel of editing access, click Add another role, select the Organization Policy Administrator role from the Role drop-down list, and click Save.
Go to .
In the resource list, select the project where you create the service account.
From Disable service account creation, Disable service account key creation, and Disable service account key upload policies, click the policy that you want to turn off.
After you click a policy, the policy details page appears, and you can follow the steps below to turn off a policy:
1. Click Manage policy.
2. Select Override parent's policy to set a unique policy for this project.
3. Click Add a rule to add a new rule.
  
  ![Clicking "Add a rule".](/en/aos/manage-app-profiles/create-custom-apps/create-a-custom-google-app/step-2-turn-off-policies-and-create-a-service-account/images/image87.png "Clicking "Add a rule".")
4. Select Off to disable the enforcement of the new rule, and click Done.
5. Click Set policy.