title: Permission denied when creating a service account key using the gcloud cli
body: <p>I am trying to create a service account key using the <code>gcloud</code> cli, I searched on google and tried with different service accounts but they all have the same error. I'm not sure what I need to change to make the following work</p>
  
  <p>Ex:</p>
  
  <pre><code>gcloud iam service-accounts keys create ~/key.json \
      --iam-account myserviceaccount
  </code></pre>
  
  <p>Error:</p>
  
  <pre><code>ERROR: (gcloud.iam.service-accounts.keys.create) PERMISSION_DENIED: Permission iam.serviceAccountKeys.create is required to perform this operation on service account projects/-/serviceAccounts/myserviceaccount
  </code></pre>