GCP: Recover deleted service account

Mar 26, 2023 · 1 min read · Post a comment

Accidentally removing default service account could just “happen” from time to time, and here’s how you can get it back.


  • GCP Service Account
  • gcloud CLI


Step 1. Find the service account (SA) ID. Go to LoggingLogs Explorer and query for any DeleteServiceAccount event. Just keep in mind, the SA should not be deleted for more than 30 days though.

Step 2. Once you have the SA ID, run the following command from the CLI:

gcloud beta iam service-accounts undelete <SA_ID>


If you get stuck at some step, feel free to leave a comment below and if you find this tutorial useful, follow our official channel on Telegram.