The easiest way to create the required service accounts is by using a Cloud Shell script available with Migrate for Compute Engine.
To find the script, open Cloud Shell and cd to /google/velostrata/.
The script enables the following GCP APIs:
- 
Cloud Resource Manager API
 
- 
Identity and Access Management (IAM) API
 
- 
Compute Engine API
 
- 
Google Cloud Storage API
 
- 
Stackdriver Logging API
 
- 
Stackdriver Monitoring API
 
All these configurations have to be done otherwise.