Create the app's service account

Open IAM & Admin → Service Accounts in the new project, Create service account, name app-server, Create and continue. Grant no role yet; tap Continue, then Done.