Google Cloud Authentication: Create service account key









up vote
0
down vote

favorite












I am using these instructions :Using the Client Libraries Python For Google TTS Wavenet Text to Speech



I am trying to setup up authentication. I am on step 4B. (From the Service account drop-down list, select New service account.)



When I use the drop down to New Service Account, I get “You don't have permission to create a new service account and key”



I am not sure what to do?



Here is my question with pictures



Update:

Output from :
gcloud projects get-iam-policy tts-alphax-nov



ERROR: (gcloud.projects.get-iam-policy) User [reddit@tts-alphax-nov.iam.gserviceaccount.com] does not have permission to access project [tts-alphax-nov:getIamPolicy] (or it may not exist): Cloud Resource Manager API has not been used in project 892455511881 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=892455511881 then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
- '@type': type.googleapis.com/google.rpc.Help
links:
- description: Google developers console API activation
url: https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=893435522881










share|improve this question























  • Are you the project owner? If not, have the project owner give you permissions or create the service account for you.
    – John Hanley
    Nov 11 at 1:36










  • @JohnHanley I am the project owner
    – normandantzig
    Nov 11 at 2:53











  • Edit your question and include the output from gcloud projects get-iam-policy PROJECT_ID. Replace PROJECT_ID with your Project ID: gcloud config get-value project.
    – John Hanley
    Nov 11 at 4:19










  • @JohnHanley updated the output.
    – normandantzig
    Nov 13 at 4:02










  • @JohnHanley BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows.
    – normandantzig
    Nov 13 at 4:15














up vote
0
down vote

favorite












I am using these instructions :Using the Client Libraries Python For Google TTS Wavenet Text to Speech



I am trying to setup up authentication. I am on step 4B. (From the Service account drop-down list, select New service account.)



When I use the drop down to New Service Account, I get “You don't have permission to create a new service account and key”



I am not sure what to do?



Here is my question with pictures



Update:

Output from :
gcloud projects get-iam-policy tts-alphax-nov



ERROR: (gcloud.projects.get-iam-policy) User [reddit@tts-alphax-nov.iam.gserviceaccount.com] does not have permission to access project [tts-alphax-nov:getIamPolicy] (or it may not exist): Cloud Resource Manager API has not been used in project 892455511881 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=892455511881 then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
- '@type': type.googleapis.com/google.rpc.Help
links:
- description: Google developers console API activation
url: https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=893435522881










share|improve this question























  • Are you the project owner? If not, have the project owner give you permissions or create the service account for you.
    – John Hanley
    Nov 11 at 1:36










  • @JohnHanley I am the project owner
    – normandantzig
    Nov 11 at 2:53











  • Edit your question and include the output from gcloud projects get-iam-policy PROJECT_ID. Replace PROJECT_ID with your Project ID: gcloud config get-value project.
    – John Hanley
    Nov 11 at 4:19










  • @JohnHanley updated the output.
    – normandantzig
    Nov 13 at 4:02










  • @JohnHanley BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows.
    – normandantzig
    Nov 13 at 4:15












up vote
0
down vote

favorite









up vote
0
down vote

favorite











I am using these instructions :Using the Client Libraries Python For Google TTS Wavenet Text to Speech



I am trying to setup up authentication. I am on step 4B. (From the Service account drop-down list, select New service account.)



When I use the drop down to New Service Account, I get “You don't have permission to create a new service account and key”



I am not sure what to do?



Here is my question with pictures



Update:

Output from :
gcloud projects get-iam-policy tts-alphax-nov



ERROR: (gcloud.projects.get-iam-policy) User [reddit@tts-alphax-nov.iam.gserviceaccount.com] does not have permission to access project [tts-alphax-nov:getIamPolicy] (or it may not exist): Cloud Resource Manager API has not been used in project 892455511881 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=892455511881 then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
- '@type': type.googleapis.com/google.rpc.Help
links:
- description: Google developers console API activation
url: https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=893435522881










share|improve this question















I am using these instructions :Using the Client Libraries Python For Google TTS Wavenet Text to Speech



I am trying to setup up authentication. I am on step 4B. (From the Service account drop-down list, select New service account.)



When I use the drop down to New Service Account, I get “You don't have permission to create a new service account and key”



I am not sure what to do?



Here is my question with pictures



Update:

Output from :
gcloud projects get-iam-policy tts-alphax-nov



ERROR: (gcloud.projects.get-iam-policy) User [reddit@tts-alphax-nov.iam.gserviceaccount.com] does not have permission to access project [tts-alphax-nov:getIamPolicy] (or it may not exist): Cloud Resource Manager API has not been used in project 892455511881 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=892455511881 then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
- '@type': type.googleapis.com/google.rpc.Help
links:
- description: Google developers console API activation
url: https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=893435522881







google-app-engine google-cloud-platform






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 13 at 4:02

























asked Nov 11 at 0:16









normandantzig

2916




2916











  • Are you the project owner? If not, have the project owner give you permissions or create the service account for you.
    – John Hanley
    Nov 11 at 1:36










  • @JohnHanley I am the project owner
    – normandantzig
    Nov 11 at 2:53











  • Edit your question and include the output from gcloud projects get-iam-policy PROJECT_ID. Replace PROJECT_ID with your Project ID: gcloud config get-value project.
    – John Hanley
    Nov 11 at 4:19










  • @JohnHanley updated the output.
    – normandantzig
    Nov 13 at 4:02










  • @JohnHanley BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows.
    – normandantzig
    Nov 13 at 4:15
















  • Are you the project owner? If not, have the project owner give you permissions or create the service account for you.
    – John Hanley
    Nov 11 at 1:36










  • @JohnHanley I am the project owner
    – normandantzig
    Nov 11 at 2:53











  • Edit your question and include the output from gcloud projects get-iam-policy PROJECT_ID. Replace PROJECT_ID with your Project ID: gcloud config get-value project.
    – John Hanley
    Nov 11 at 4:19










  • @JohnHanley updated the output.
    – normandantzig
    Nov 13 at 4:02










  • @JohnHanley BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows.
    – normandantzig
    Nov 13 at 4:15















Are you the project owner? If not, have the project owner give you permissions or create the service account for you.
– John Hanley
Nov 11 at 1:36




Are you the project owner? If not, have the project owner give you permissions or create the service account for you.
– John Hanley
Nov 11 at 1:36












@JohnHanley I am the project owner
– normandantzig
Nov 11 at 2:53





@JohnHanley I am the project owner
– normandantzig
Nov 11 at 2:53













Edit your question and include the output from gcloud projects get-iam-policy PROJECT_ID. Replace PROJECT_ID with your Project ID: gcloud config get-value project.
– John Hanley
Nov 11 at 4:19




Edit your question and include the output from gcloud projects get-iam-policy PROJECT_ID. Replace PROJECT_ID with your Project ID: gcloud config get-value project.
– John Hanley
Nov 11 at 4:19












@JohnHanley updated the output.
– normandantzig
Nov 13 at 4:02




@JohnHanley updated the output.
– normandantzig
Nov 13 at 4:02












@JohnHanley BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows.
– normandantzig
Nov 13 at 4:15




@JohnHanley BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows.
– normandantzig
Nov 13 at 4:15












1 Answer
1






active

oldest

votes

















up vote
0
down vote













You will need the following permission to create service account:




  • Service Account Admin (roles/iam.serviceAccountAdmin): Includes Service
    Account User permissions and also grants permissions to create,
    update, delete, and set or get the Cloud IAM policy on a service
    account.



Go to google cloud console -> IAM & Admin -> IAM -> Members and double check if your account is listed there as a project owner. Also make sure you are logged in with correct google account.



If you are not, your project admin need to go to add Service Account Admin role for your account:



enter image description here






share|improve this answer




















  • The service account is owner.
    – normandantzig
    Nov 13 at 4:04










  • BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows
    – normandantzig
    Nov 13 at 4:16










Your Answer






StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53244698%2fgoogle-cloud-authentication-create-service-account-key%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes








up vote
0
down vote













You will need the following permission to create service account:




  • Service Account Admin (roles/iam.serviceAccountAdmin): Includes Service
    Account User permissions and also grants permissions to create,
    update, delete, and set or get the Cloud IAM policy on a service
    account.



Go to google cloud console -> IAM & Admin -> IAM -> Members and double check if your account is listed there as a project owner. Also make sure you are logged in with correct google account.



If you are not, your project admin need to go to add Service Account Admin role for your account:



enter image description here






share|improve this answer




















  • The service account is owner.
    – normandantzig
    Nov 13 at 4:04










  • BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows
    – normandantzig
    Nov 13 at 4:16














up vote
0
down vote













You will need the following permission to create service account:




  • Service Account Admin (roles/iam.serviceAccountAdmin): Includes Service
    Account User permissions and also grants permissions to create,
    update, delete, and set or get the Cloud IAM policy on a service
    account.



Go to google cloud console -> IAM & Admin -> IAM -> Members and double check if your account is listed there as a project owner. Also make sure you are logged in with correct google account.



If you are not, your project admin need to go to add Service Account Admin role for your account:



enter image description here






share|improve this answer




















  • The service account is owner.
    – normandantzig
    Nov 13 at 4:04










  • BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows
    – normandantzig
    Nov 13 at 4:16












up vote
0
down vote










up vote
0
down vote









You will need the following permission to create service account:




  • Service Account Admin (roles/iam.serviceAccountAdmin): Includes Service
    Account User permissions and also grants permissions to create,
    update, delete, and set or get the Cloud IAM policy on a service
    account.



Go to google cloud console -> IAM & Admin -> IAM -> Members and double check if your account is listed there as a project owner. Also make sure you are logged in with correct google account.



If you are not, your project admin need to go to add Service Account Admin role for your account:



enter image description here






share|improve this answer












You will need the following permission to create service account:




  • Service Account Admin (roles/iam.serviceAccountAdmin): Includes Service
    Account User permissions and also grants permissions to create,
    update, delete, and set or get the Cloud IAM policy on a service
    account.



Go to google cloud console -> IAM & Admin -> IAM -> Members and double check if your account is listed there as a project owner. Also make sure you are logged in with correct google account.



If you are not, your project admin need to go to add Service Account Admin role for your account:



enter image description here







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 12 at 8:32









Caner

32.5k25121139




32.5k25121139











  • The service account is owner.
    – normandantzig
    Nov 13 at 4:04










  • BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows
    – normandantzig
    Nov 13 at 4:16
















  • The service account is owner.
    – normandantzig
    Nov 13 at 4:04










  • BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows
    – normandantzig
    Nov 13 at 4:16















The service account is owner.
– normandantzig
Nov 13 at 4:04




The service account is owner.
– normandantzig
Nov 13 at 4:04












BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows
– normandantzig
Nov 13 at 4:16




BTW I got the python script to work in Linux from the WSL on my PC. I think something is wrong with my console setup in windows
– normandantzig
Nov 13 at 4:16

















 

draft saved


draft discarded















































 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53244698%2fgoogle-cloud-authentication-create-service-account-key%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







這個網誌中的熱門文章

Barbados

How to read a connectionString WITH PROVIDER in .NET Core?

Node.js Script on GitHub Pages or Amazon S3