The easiest way to create the required service accounts is by using a Cloud Shell script available with Migrate for Compute Engine.
To find the script, open Cloud Shell and cd to /google/velostrata/.
The script enables the following GCP APIs:
-
Cloud Resource Manager API
-
Identity and Access Management (IAM) API
-
Compute Engine API
-
Google Cloud Storage API
-
Stackdriver Logging API
-
Stackdriver Monitoring API
All these configurations have to be done otherwise.