In addition to above answers, for any dealing with issues on servic account creation restriction.

what worked for me is;

gcloud resource-manager org-policies disable-enforce iam.disableServiceAccountKeyCreation
--organization=ORG_ID

But then you need to login through gcloud, install gcloud and auth first