Authorize Service Account Key Uploads

36 views
Skip to first unread message

Paul Anderson

unread,
Apr 4, 2025, 9:25:18 AM4/4/25
to GAM for Google Workspace


When following these instructions from the WIKI in the URL

Authorize Service Account Key Uploads

If you try to create a project and get an error saying that Constraint constraints/iam.disableServiceAccountKeyUpload violated for service account projects/gam-project-xxxxx, perform these steps and then you should be able to authorize and use your project.

  • Login as an existing super admin at console.cloud.google.com
  • In the upper left click the three lines to the left of Google Cloud and select IAM & Admin
  • Under IAM & Admin select IAM
  • Click the down arrow in the box to the right of Google Cloud 
  • Click the three dots at the right and select IAM/Permissions
  • Now you should be at "Permissions for organization ..."
  • Click on Grant Access
  • Enter the new admin address in Principals
  • Click in the Select a role box
  • Type orgpolicy.policyAdmin in the Filter box
  • Click Organization Policy Administrator
  • Click Save


image (15).png
In the steps above they don't match with what I am seeing, here are the differences:

1.  Click the down arrow in the box to the right of Google Cloud - NO DOWN ARROW TO THE RIGHT
Click the three dots at the right and select IAM/Permissions
2.  Now you should be at "Permissions for organization ..." I get Permissions for gam project
Click on Grant Access
Enter the new admin address in Principals
Click in the Select a role box
Type orgpolicy.policyAdmin in the Filter box   I don't have this Role.
Click Organization Policy Administrator


image (15).png


Ross Scroggs

unread,
Apr 4, 2025, 9:52:06 AM4/4/25
to google-ap...@googlegroups.com
I've changed:
Click the down arrow in the box to the right of Google Cloud
to:

Click in the box to the right of Google Cloud


Rpss


----
Ross Scroggs



On Apr 4, 2025, at 6:25 AM, Paul Anderson <pa...@hayward.k12.wi.us> wrote:



When following these instructions from the WIKI in the URL

Authorize Service Account Key Uploads

If you try to create a project and get an error saying that Constraint constraints/iam.disableServiceAccountKeyUpload violated for service account projects/gam-project-xxxxx, perform these steps and then you should be able to authorize and use your project.

  • Login as an existing super admin at console.cloud.google.com
  • In the upper left click the three lines to the left of Google Cloud and select IAM & Admin
  • Under IAM & Admin select IAM
  • Click the down arrow in the box to the right of Google Cloud 
  • Click the three dots at the right and select IAM/Permissions
  • Now you should be at "Permissions for organization ..."
  • Click on Grant Access
  • Enter the new admin address in Principals
  • Click in the Select a role box
  • Type orgpolicy.policyAdmin in the Filter box
  • Click Organization Policy Administrator
  • Click Save


<image (15).png>
In the steps above they don't match with what I am seeing, here are the differences:

1.  Click the down arrow in the box to the right of Google Cloud - NO DOWN ARROW TO THE RIGHT
Click the three dots at the right and select IAM/Permissions
2.  Now you should be at "Permissions for organization ..." I get Permissions for gam project
Click on Grant Access
Enter the new admin address in Principals
Click in the Select a role box
Type orgpolicy.policyAdmin in the Filter box   I don't have this Role.
Click Organization Policy Administrator





--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/0851d40c-b9a7-4e59-87c0-0adf1c8840f8n%40googlegroups.com.
<image (15).png>

Reply all
Reply to author
Forward
0 new messages