This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.
Log in to ask a question

HELP! Seem to have killed my App Engine default service account

Posted on 06-05-2023 12:56 PM
williamsdyyz
Bronze 1
Bronze 1
Reply posted on --/--/---- --:-- AM

My site is down and I have absolutely no idea what to do.

I was trying to add a role to the service account but somehow seem to have removed ALL permissions (I think)

How can I fix this? I don't understand how I broke it and I have no idea how to fix it.

0 2 183
Topic Labels
0 Likes
2 REPLIES 2

Posted on --/--/---- --:-- AM
NoCommandLine
Bronze 3
Bronze 3
Reply posted on --/--/---- --:-- AM

Can you post the content/output of your log?

 

..... NoCommandLine ......
 https://nocommandline.com
A GUI for Google App Engine
0 Likes

Posted on --/--/---- --:-- AM
williamsdyyz
Bronze 1
Bronze 1
Reply posted on --/--/---- --:-- AM

I confirmed that the service account had no permissions and after a couple of hours I managed to find a set of roles that allowed the site to run again.  It probably has way too many permissions now but at least it's working.

I'm amazed at how bad the Service Accounts/Persmissions UI is. I have no idea how I managed to delete all the permissions. Then to make things worse, the same UI doesn't seem to be able to add most back - I had to resort to the command line to add roles/cloudsql.client for example.

So, in short, I'm back up but still have a lot of crap to restore. Really unimpressed with Google Cloud UI and Docs in this area.

0 Likes