you can follow this link to solved it: https://www.cubebackup.com/docs/tutorials/gcp-allow-service-account-key-creation/