Create a "service account"

Visit Google Cloud IAM
Make sure the correct project is selected
Click on "Service accounts"
Click on "Create service account"
Pick a name
Set the role (See Service Account recommended permissions)
Click on "Furnish a new private key"
Select "JSON" in "Key type"
Click "CREATE"