Помощь в настройке Google Cloud и Google Workspace

Суть вопроса. Проект создан, сервис аккаунт создан, но не получается создать JSON-ключ (нужен для трансфера на Яндекс с Гугла)

Выкидывает такое сообщение

--------------------
Service account key creation is disabled
An Organization Policy that blocks service accounts key creation has been enforced on your organization.
Enforced Organization Policies IDs:
iam.disableServiceAccountKeyCreation
Possible Causes: Your Organization Policy Administrator enforced the Organization Policy to prevent security incidents related to Service Account keys. Alternatively, your organization may have been automatically enforced with the policy as part of Secure by Default enforcements. 

Recommended Next Steps: Service account keys are a security risk if not managed correctly. You should choose a more secure alternative  whenever possible. If you must authenticate with a service account key, an administrator with the "Organization Policy Administrator" (roles/orgpolicy.policyAdmin) role on the organization needs to disable  the constraints mentioned above.
-----------------

Как исправить "политику" не понятно, разобраться не можем. Если кто понимает суть  вопроса, будем признательны за помощь.