goto
https://console.cloud.google.com/iam-admin/serviceaccounts/create
click create account, give the service account a name, id and description
click create account
assign roles,
owner or editor has the most priviledges
viewer the least
in the list of service accounts, click the newly created one
goto to the keys tab
click
add key -> create new key
choose json format
download box will pop