Forum Discussion
Google workspace migration - Automatic doesn't download the JSON while creating the migration endpoi
I recently came across an issue where the google workspace migration wasn't downloading the Json file. After a lot of struggle, I figured out that google by default blocks service account key creation. To resolve this, follow the below mentioned steps
1) login to https://console.cloud.google.com/iam-admin and select the root org
2) Add Organisation Policy Administrator role
3) Click on Organization policies and then search for "Disable service account key creation" and set the enforcement to OFF.
4) Now you should be able to download the JSON.
2 Replies
Great find, this is a very common blocker and not obvious at all.
Google disabling service account key creation by default is exactly what causes the JSON download to fail during Microsoft automated migrations. Your steps are spot on and this fix saves a lot of time and frustration.
I’ve documented this issue and workaround as part of a full Google Workspace to Microsoft 365 migration guide, including screenshots and validation steps
https://mstack360.com/google-workspace-to-microsoft-365-migration/
There’s also a live migration walkthrough where this exact scenario comes up in real time
https://www.youtube.com/watch?v=C8f1YssSgXM
Thanks for sharing this, very helpful for the community.
Best,
Ahmed Masoud
This is unique information which seemingly cannot be found anywhere else. Thank you!
