Firebase Question posted in
An extensive official documentation can be found here.

Firebase will not let me create service account key

When trying to generate and download a new service account key I get a message that I have reached my limit. I don’t have any keys created so it seems the limit is 0.

I am using a Google Workspace account. I believe that this setting is being limited by the organization that the gmail account is associated with. There is only one email for the organization which I am using and it is the adminstrator. I have the ability to change any Google Cloud setting but I have no idea where to go and do this.

The main reason why I mention Workspace is that it’s only happening on this new account with a new Workspace domain and a fresh Firebase install. I spun up a quick Firebase project with a gmail account and did not have an issue with keys at all.

I need a key so that I can create a node.js program that sets custom claims on authenticated users.

firebase issue

What I saw in Google Cloud

Doug Stevenson: Even though the message says you have reached the limit it doesn’t make sense because I don’t have any keys created.

Also, here is what happens when the steps you provided are followed.

Click the Add key drop-down menu, then select Create new key.
enter image description here
Select JSON as the Key type and click Create.
enter image description here

I found a place to edit organizational constraints however it appears here that the disableServiceAccountCreation is not enforced.
https://console.cloud.google.com/iam-admin/orgpolicies
enter image description here
enter image description here

Tags:

2

Answers


  1. 0

    You should review the documentation. The instructions for doing this in the google cloud console are are spelled out clearly:

    1. In the Google Cloud console, go to the Service accounts page. Go to "Service accounts". The remaining steps will appear automatically in
      the Google Cloud console.
    2. Select a project.
    3. On the Service accounts page, click the email address of the service account whose key you want to delete.
    4. Click the Keys tab.
    5. From the list of keys, click Delete delete for each key you’d like to delete.

    It will be entirely up to you to figure out which key to delete, as this might have effects on the way you might already be using this service account.

    Login or Signup to reply.
  2. 0

    You are not looking at the correct org policy

    Disable service account creation

Disable service account key creation

    You were looking at SA creation not key creation

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search