• Welcome to community.cognetic.com.


Cognetic Awarded one of Houston's Largest Tech Companies

Main Menu

How to resolve "Service account key creation is disabled"

Started by bflores, Today at 05:37:43 PM

Previous topic - Next topic


SOURCE: https://stackoverflow.com/questions/78161775/organisational-policy-permissions-google-cloud-for-microsoft-migration

With a Workspace super admin, login to https://console.cloud.google.com. Make sure you're working in the root org.

- Select IAM and admin.
- In IAM on left-hand menu, edit permissions for organisation.
- Add Organization Policy Administrator and save.
- Go to Organization policies in left-hand menu.
- Search for 'Disable service account key creation'.
- Edit policy, set Enforcement to Off and save.
- Change workspace from root org to the project the 365 wizard created. Mine was called projectnamempij.
- In IAM and admin, go to Service accounts in left-hand menu.
- In the 3 dots menu besides the service account, select Manage keys.
- When in service account, Add key -> Create new key.
- The json file is created and downloaded.
- Create a new endpoint in Exchange Online and use the downloaded json